CDG) 


STALLED IN TRAFFIC 


Urban delivery service Kozmo.com has cooled off consid- 
erably, but company execs remain optimistic. Page 42 


=] ANNUAL 
HIRING 
FORECAST 


THE RACE IS ON 


Employers compete to snatch up talent 
as top techies ditch dot-coms. Page 36 


DISAPPEARING E-MAIL 


For the security-conscious, new e-mail software 
destroys messages after an expiration date. Page 50 
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LICENSING 
SHOW DOWN 
LOOMING 


As sides gird for battle in key states, users 
say UCITA law would increase IT costs 


BY PATRICK THIBODEAU 
UCITA proponents will push 
for adoption of the controver- 
sial software licensing law in 


four or five states in pisses 
USERS VS. 
VENDORS © 


2001, but they will face 
opposition from some 
end-user companies, 
along with warnings 
that the measure could signifi- 
cantly increase IT costs. 
Nationwide Insurance Cos. 
estimated that the Uniform 
Computer Information Trans- 
actions Act could boost its 
costs by a minimum of $20 mil- 
lion. The insurer cited security 
problems created by the law, 
which would give software 
vendors the ability to remotely 


OUPPLY-CHAIN 
ROI IS ELUSIVE 


Report: Gaffes made 
stock prices, fall 8.6% 


BY MARC L. SONGINI 
Fruit of the Loom Inc. thinks it 
can buck a trend identified in a 
recent study and do supply 
chain right. 

The Chicago-based clothing 


disable systems through “self- 
help,” as it’s called in UCITA, 
as well as increased contract- 
ing and negotiation costs. 

Moreover, UCITA’s 
liability-limiting pro- 
visions would increase 
Nationwide’s software 
quality assurance costs 
because the measure would act 
as a deterrent for vendors to 
deliver a working product, said 
Bruce Barnes, vice president of 
technology strategy and plan- 
ning at Columbus, Ohio-based 
Nationwide. 

“The best that we can do is 
to make people aware of the 
implications associated with 

UCITA, page 65 


| giant is launching a manufac- 


turing data collection pilot 
program as the start of a sup- 
ply-chain overhaul, said Brent 
Sealey, a senior planning man- 
ager at the company. If suc- 
cessful, the pilot will be the 
first step in a widespread effort 
to replace homegrown supply- 
chain and enterprise resource 
planning applications with 


commercial software, said 


| Sealey. Ultimately, this should 


enable the company to reduce 
Supply Chain, page 65 
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MARYANN GOEBEL, CIO at General Motors Europe: “Going global” means negotiating with organized labor. 


TT AGENDA 


Will you stumble from project to project this year, or will you have a 
coherent plan for accomplishing IT goals? Computerworld offers 10 action 
items to help you focus on what’s really important, from snagging the best 
talent to retooling your data center. You'll get advice from your peers on how 
to manage Web content, migrate to Windows 2000, analyze clickstream data 
and even get a return on investment from that wireless project you’ve been 
Special Report begins after page 34. 


thinking about. 





Hint for pure plays: It’s 
the ec economics, stupid 


| BY DAN VERTON 
| A lot of pure-play online retail- 
| ers are learning the hard way 
| that while cool Web sites at- | 


tract a lot of eyeballs, e-retail- 


| ing is still about one thing: | 
| making money. 


-NOT-50-HAPPY HOLIDAYS ONLINE 


Lower-than-expected sales 
forecasts at the height of the 
holiday buying season raised 
concerns last month about the 
future of Los Angeles-based 


| eToys Inc. [see story, page 16] 


and sent shivers down the 
spines of other venerable re- 
tailers in cyberspace, including 
Seattle-based Amazon.com Inc. 

The problem remains that 


the vast majority of troubled 
pure-play e-retailers continue 
to spend an inordinate amount 
of money trying to attract new 
customers to their Web 
and marketing their brands, 
said Paul Ritter, an analyst at 
The Yankee Group in Boston. 
The result has been unsus- 
tainable gross margins that in- 
vestors are shying away from 
But the problems at 
Online Retailers, page 15 


sites 


eToys 





A Brand New 


Day For CA. 





A New Mission: The Software 
That Manages eBusiness. 


We started with four people, one product, and no venture capital. 
Twenty-four years later, CA has been involved in virtually every 
aspect of the software industry. From mainframes to PCs to Palm 
Pilots, from database to financials to network management, we've 
developed and sold more kinds of software for more kinds of com- 
puters than any other company. 


But today, our mission is more focused than ever before. Today, we 
develop and support only one kind of software: The software that 
manages eBusiness. 


That may sound simple enough, but it’s the biggest opportunity 
we've ever faced. You see every business in the world is going to 
need help managing their eBusiness. And we are uniquely posi- 
tioned to help in more ways than anyone else. 


We offer not only the broadest range of eBusiness software solu 
tions, we have more eBusiness software developers, consultants, and 
experts. And with a 24-year track record of success and a client list 
that includes 99% of the Global 2000, we’re years ahead of the 
competition and we have the experience, resources, and reputation. 
No matter which way you look at it, it’s very clear that our new mis- 
sion is ideally suited to our talents, our capabilities, and our her- 
itage. It’s not only the right strategy for our company, it’s also the 
best path to maximize shareholder value. 


A New Business Model. 


The new economy demands a new business model. Clients demand 
a new kind of partner that understands their business problems and 
one that will do whatever it takes to solve them. That’s why we are 


transforming our entire company into a more flexible, responsive, and 
customer-focused organization. We’re the first enterprise software 
company to receive global ISO 9002 certification for our commit- 
ment to quality. To top aii of this off, we even introduced a revolu- 
tionary new business model that gives our clients more choices on 
how to partner with us. You see, when our clients speak, we not only 


listen — we act 


A New Logo. 


After 24 years, we’re not the same company we used to be which 

is why we hired the world’s leading corporate identity company to 
develop a new corporate logo that would more accurately portray 
what CA is all about. We think they got it just right. Our new logo 
tells the world that CA is focused, focused, focused. It builds on a 
glorious quarter century of history and corporate culture. It’s a col- 
orful, fresh new look that offers the dynamic combination of high 
energy and vision with good old fashioned, feet-on-the-ground sta- 
bility and strength. Our new logo shows that we are very proud of 
our distinguished 24-year heritage and track record of success but at 
the same time we have our eyes fixed firmly on the future. We'll be 
introducing our new logo to more than | billion people in 160 coun- 
tries over the next 120 days. 


A New Attitude. 


You can see it in our faces. You can hear it in our voices. You 

can feel it when you shake hands with any one of our 18,000 
employees. Our people have never been more excited, more moti- 
vated and more energized about all of the changes happening here 
at CA. Our people have never been more focused, more responsive, 
and more committed to helping our clients solve their problems. It’s 
a new attitude and energy that is as refreshing and as powerful the 
new logo that represents it. 


Computer Associates 


2001 Computer Associates International, Inc. (CA). All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies 
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LEARNING BY LAPTOP 


IT AGENDA 2001 


Need to set your priorities for the new year? 
IT Agenda 2001 not only identi- 


fies what you need to do, but 


also offers advice on how to do 
it. Our action items range from 


plumbing your click- 
stream data to migrating 
to Win 2k. Your to-do 
list follows page 34. 


Pssst! Looking for a small college that’s hip to technology? 
Try Valley City State University in North Dakota, whose 
strategic use of IT has helped transform it into an educa- 
tional pioneer. “We needed to differentiate ourselves big 
time,” says school President Ellen Chaffee. Page 40 





NEWS 


6 COMPANIES STRUGGLE 
to update legacy applications 
and bring them to the Web — 
a process made tougher by 
year 2000 fixes. 


CYBERTERRORISM wii! 


become a real threat in the 
next decade, two studies say. 


MICROSOFT MAY wiggle off 


the legal hook because of the 
Bush victory and the compa- 
ny’s weakening financials. 


FEDS RELEASE sweeping 
new rules for the privacy and 
security of patient health infor- 
mation. 


IT SPENDING growth will 
slow to 8% in 2001, according 
to a survey of 150 top CIOs. 


RETAILERS UPGRADE 
their data storage to handle the 
holiday customer information 
they’ve harvested. 


E-TOYS FINDS no joy in the 
holidays, as lower-than-expect- 
ed sales could lead to layoffs. 


PRICELINE TAKES another 
hit as two of its planned spin- 
offs sputter. 

PUERTO RICO SAVES mon- 
ey by building its own fixed 
wireless broadband network 
rather than hiring a carrier. 
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JANUARY 1, 


@ BUSINESS 


28 START-UP VETERAN offers 
advice to job seekers about 
how to find a good dot-com 
opportunity. 


AUTO EXCHANGE shows the 
difficulties of getting massive 
operations up online. 


MP3.COM FACES more 


legal hurdles from an EMusic.- 
com lawsuit. 

WORKSTYLES 
HALLMARK’S IT staffers 
combine tech savvy with 
creative flair. 


EMPLOYERS COMPETE 
for workers who tire of dot- 
coms and head back to the 
corporate world. 


KOZMO.COM STANDS BY 
its chances for survival, despite 
the start-up’s recent turmoil. 
QUICKSTUDY 

BUSINESS PROCESS out- 
sourcing lets companies focus 
on their core competencies by 
farming out their administra- 
tive business functions. 


OPINIONS 


22 MARYFRAN JOHNSON 
says you can expect a flood of 
résumés from IT job applicants 
in 2001, but only a few will 
have the skills you really need. 
DAVID MOSCHELLA warns 
that the Web won't solve the 
voting problems highlighted in 
the presidential election. 





2001 


TECHNOLOGY =@ 


48 BOSE TURNS 10 quality-of- 
service technology to keep its 
network running smoothly 


48 IBMAND SEITEL plan to 
build a SAN that will make 
more than a petabyte of data 
available via the Web. 
SECURITY JOURNAL 

49 AUTHENTICATION is a secu- 
rity nightmare for Jude until 
someone comes up with a 
simple solution. 

FUTURE WATCH 

51 HYDROGEN FUEL celis have 
been around for more than a 
century, but they may be the 
energy source of the future. 


52 NEW TOOLS EMERGE to 
bridge the wireless security 
gap for organizations. 
QUICKSTUDY 

54 FONTS APPEAR SIMPLE, 
but it’s what you don’t see that 
makes them usable. 
EMERGING COMPANIES 

55 CONITA OFFERS voice 
portal technology for mobile 
workers. 


SO A COENEN ae 





24 DAN GILLMOR writes that 
president-elect Bush may be 
walking a political tightrope on 
two technology issues: Internet 
taxation and data privacy. 


24 MICHAEL GARTENBERG 
tells how you can poke holes in 
any IT-related prediction. 

35 JIM CHAMPY says a predict- 
ed slowdown in the IT services 
industry means business man- 


oe 


| 





ONLINE 


Marit 
| CHOC ol 


Now take Comput- 

erworld wherever 

you go, with Computer- 

world Mobile for your handheld 
device! Get more details and sign up 
for the free service at 
www.computerworld.com/mobile. 


In our Windows 2000 Community, a 
Microsoft spokesman talks about re 
cent changes to the Microsoft Certi 
fied Systems Engineer program and 
how they'll affect IT professionals. 
www.computerworld.com/windows 


lo thrive in the world of e-commerce, 
companies must make security and 
trust primary building blocks of their 
overall success, writes Jamie Ross of 
Ernst & Young LLP in our Security 
Watch Community. 


www.computerworld.com/ecurity 


agers are entering the new 
year uncertain about technol- 
ogy’s payoffs. 


JOE AUER warns IT buyers: 
Before you begin a contractual 
relationship with a vendor, be 
sure both sides prepare for the 
day the relationship ends. 
FRANK HAYES offers his 
take on what the key IT issues 
will be in 2001. 


www.computerworld.com j . 























AT DEADL 
Xerox Loses Y2k 
Insurance Suit 


Xerox Corp. in Stamford, Conn., has 
lost a summary judgment against its 
insurer, American Guarantee and 
Liability Insurance Co., in a New 
York state court. Xerox attempted 
to recoup the $183 million it spent 
fixing year 2000 date problems. 
Under New York law, an insurance 
customer must notify its insurers of 
potential losses within 60 days. 
Xerox began its Y2k work in 1996 
but didn't file a claim with American 
Guarantee until March 1999. Xerox 
is considering an appeal, according 
to company officials. 
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Hacker Cracks 
Egghead’s Security 


Online technology retailer 
Egghead.com Inc. confirmed that a 
hacker managed to penetrate its 
computer systems, possibly includ- 
ing the customer databases in 
which the company stores credit- 
card numbers and other personal 
information about the users of its 
Web site. In a statement late last 
month, Menlo Park, Calif.-based 
Egghead said it had reported the 
hacking incident to credit-card 
companies “as a precautionary 
measure,” in case card numbers 
were stolen by the intruder. 


Short Takes 

IBM settled 6-year-old allegations 
of concealing bribes paid by former 
top executives at its IBM ARGENT! 
NA SA subsidiary, in violation of the 
U.S. Foreign Corrupt Practices Act. 
IBM will pay a $300,000 penalty. 
... CALDERA SYSTEMS INC. in 
Orem, Utah, has announced a proj- 
ect to develop an open-source Sam- 
ba client library to make it easier for 
developers to integrate Linux and 
MICROSOFT CORP. applications. 
... LUCENT TECHNOLOGIES INC 

in Murray Hill, N.J., warned that it 
expects to report a “significant” 
loss for the current quarter and said 
its revenue total for the previous 
three-month period is being reduced 
by $679 million. . . . Madrid-based 
AMADEUS GLOBAL TRAVEL DIS- 
TRIBUTION SA signed a 10-year, 
$157 million deal to operate the 
reservations, inventory and depar- 
ture control systems for Australia- 
based QANTAS AIRWAYS LTD. 





NEWS 


COMPUTERWORLD January 1, 2001 


7 Y2k Quick Fixes Spark 


New Round of Upgrades 


Costly, patched-up older systems now 
being replaced with Web-based apps 


BY LEE COPELAND 
OR NATIONAL City 
Corp. (NCC), a bank 
with more than 1,500 
corporate and retail 
chains, data conver 
sion concerns didn’t go away 
with year 2000. 
The Cleveland-based 
retrofitted 


bank 
a critical applica- 
tion with Y2k-compatible dat- 
ing a year ago. But that process 
introduced complications into 
already-unwieldy applications. 

It’s a problem many IT shops 
faced in 2000: Applications 
that once hummed along ef- 
fortlessly were crippled by the 
date fixes undertaken to keep 
them in production. 


Date Modifications Woes 
NCC $10 million six 


years 


spent 
ago to custom-build a 
customer support application, 
a vital tool for tracking credit 
and transaction histories and 
contacts of its corporate ac- 
counts. But with the century 
date-change issue not yet on 
the horizon, the developers 
failed to make the three-tiered 
application Y2k-compliant. 

“We discovered that the real 
difficulty would occur after 
the clock ticked over [to 
2000],” said Jim Hughes, CIO 
at the $92 
bank. “There were issues with 
the way the system was devel- 
oped, which made it difficult to 
modify the software while it 


billion-in-assets 


was in production. And we 
were using old versions of the 
tools that had not been kept 
up-to-date.” 

Phillip Murphy, an analyst 
at Giga Information Group Inc. 
in Cambridge, Mass., said nu- 
merous companies sought to 
overhaul key applications after 
getting over the Y2k hurdle. 

“A lot of folks ran out of time 
to do it right and put a kludge 
in,” said Murphy. “Other com- 
panies have made their code 
more difficult to use and prob- 
lematic in the they 
patched it.” 


way 


To get out of its three-tiered 
quagmire, NCC used conver 
sion software from Relativity 
Technology Inc. in Cary, N.C., 
to transform the application 
into a Web-enabled and brows 
er-based architecture. It 
NCC about $3 million and took 
nine 


cost 
months to revamp the 
application, Hughes said, but 
he estimated that it would have 
cost twice that to rewrite the 
application from scratch. 

“The Y2k push highlighted 
how complicated the legacy 
world is,” said Tyler McDaniel, 


an analyst at Hurwitz Group 
Framingham, Mass. 
was a desire for the 


Inc. in 
“There 
quick fix to maintain applica 
tions. The Y2k push is done, so 
budgets are swinging back and 
moving toward Web-enabled 
commerce.” 


More Using Web-Based Apps 
Some 

different post-Y2k irony: hav 

ing to scrap problematic appli- 


companies faced a 


cations they had spent time 
and cash to fix. 

Scott 
ministrator at Pabst Brewing 
Co. in San Antonio, is in the 
midst of converting a mam- 
moth, 8-year-old database to 
the Web. Y2k salvage work 


Davis, a database ad- 


Labor Department Unveils 
Revised H-1B Regulations 


U.S. 
wouldn’t get paid during that 
period, said Lynn Shotwell, di- 
rector of government relations 


Equal treatment 
sought for workers 


BY JULEKHA DASH 

Che U.S. Department of Labor 
late last month offered expand- 
ed regulations that apply to the 
employment of skilled tempo- 
rary foreign workers, or H-IB 
visa holders. 

The new guidelines, which 
attorneys and 
generally applauded, are 
geared toward requiring com- 
panies to provide equal treat- 
ment to U.S. and H-1B workers, 
as well as safeguarding against 


labor leaders 


abuse of the visa program. 

However, one group ex- 
pressed concern that the rules, 
which take effect the day be- 
fore President Clinton leaves 
office, might actually lead em- 
ployers to treat H-1B holders 
more favorably than U.S. work- 
ers because one provision stip- 
ulates that employers pay H-1B 
workers even during periods 
of downtime. 

For example, if a company 


decided to lay off workers for | 


a couple of weeks before a 


restructuring, citizens 


at the American Council on 
International Personnel Inc. 
Yet this provision implies 
that H-1B holders 
ceive payment during that peri- 
od, said Shotwell. “This is one 


would re- 


of the issues they didn’t resolve 
to our satisfaction,” she said. 
Under the new regulations, 
employers must offer the same 
benefits to H-1B and U.S. em- 
Also, firms 
workforces consist of at least 


ployees. whose 





a a 
Revised Labor 
Requirements 


The new H-1B regulations: 
Require companies whose workforce 
Yo H-1B visa holders to 


confirm they aren't displacing U.S. workers 


consists of at least 


Force firms to offer same benefits to 


H-1B holders, and payment during downtime | 


Provide “whistle-blower protection” 
to H-1B holders who testify against their 
employers 


kept the legacy application — 
which contains 
tables on Pabst’s promotions, 


hundreds of 


pricing, credit and tax formu 
las — in production. Yet after 
the conversion is completed, 
Pabst plans to scrap the DOS- 
based database. 

“The 
tough,” said Davis. “The 50 
states have 50 
quirements.” Using software 
froin Austin, Texas-based Data 
Junction Corp., Davis said he 


beer business is 


different re- 


hopes to widen access to the 
system and make it easier to 
manage by converting the 
database into a Web-enabled 
that Win- 
dows clients and a SQL Server 
7 back end. D 


system supports 


15% H-IB holders — typically 
contractors — or are proven to 
have violated H-1B regulations 
in the past must attest that they 
aren't replacing U.S. workers 
with H-1B workers. Shotwell 
estimated that this would ap- 
ply to a few hundred firms. 

H-1B holders are also grant- 
ed “whistle-blower  protec- 
tion,” allowing them to stay in 
the U.S. for the 
their 
abuses by their employers. 

“One of the problems with 
the temporary foreign worker 
program is that [H-1B] workers 
are extremely dependent on 
employers to get them into the 
U.S. and sponsor them for a 
green card,” said John Fraser, 
deputy administrator for the 
wage and hour division at the 
Labor Department. 

“There are already a lot of 


duration of 
visa if they report visa 


reasons why temporary for- 
eign workers won’t complain” 
about treatment, said Fraser, 
that whistle-blower 
protection removes some ob- 


adding 


stacles for foreign workers 
who fear that reporting abuses 
will result in their deportation. 

Last October, Congress in- 


| creased the H-IB visa quota to 


195,000 during the next three 
fiscal years. The cap was due 
to fall to 107,500 for the fiscal 
year that began Oct. 1, 2000, 


| and to 65,000 the following 


fiscal year. D 
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National Security Threatened by Internet, Studies Say 


Experts warn that terrorists, other nations 
are busy preparing for cyberwarfare 


BY DAN VERTON 
During the next 15 years, the 
U.S. will face 
Internet-enabled 


a new breed of 
terrorists, 
criminals and nation/state ad- 
versaries that wiil launch at- 
tacks not with planes and 
tanks, but with 
viruses and logic 
two 


computer 
bombs, ac- 
cording to 
leased last month. 

Although the 68-page report 
by the CIA’s National Intelli- 
gence Council (NIC) 
tioned critical electronic infra- 
structure protection and infor- 
mation warfare only briefly, it 
warned Americans that adver- 
saries around the world are 
hard at work developing tools 
to bring down the U.S.’s private 
sector infrastructure. 


reports re- 


men- 


Many countries already have 
develop 
technologies and 


programs to such 
“could devel- 
op such capabilities over the 
next decade and beyond,” ac 
cording to the NIC study. 

A report by the Washington- 
based Center for Strategic and 
International Studies (CSIS) 
went even further, warning of 
a future cyberarms race and 
the rise of terrorist groups 
supported by “computer-liter- 
ate youngsters” bent on dis- 
rupting the Internet. 

“The U.S., Russia, China 
France and Israel are develop- 
ing cyberarsenals and the 
means to wage all-out cyber- 
warfare,” the CSIS study said. 

China is of particular con- 
cern, said experts, because it’s 


devising strategies for unre- 
stricted e le ctronic warfare. Of- 
ficials said critical infrastruc- 
tures in the U.S. could be tar- 
future 
for incidents like the 1999 acci- 
dental bombing of the 
embassy in Serbia. 


geted in the as revenge 


Chinese 


“They suggest having every 


person in China send one 


e-mail to [an address] of inter- 
est in the US. hacker 
available on the 
support a 


or use 
tools easily 
Internet to mass 
said 


a former military 


{denial-of-service] attack,” 
john Shissler, 
intelligence officer. 

Online extortion 
cation of shipping manifests by 


and falsifi 


criminals, and attempts by 


> Many countries san programs to develop cyberattack technologies 
and could develop such capabilities over the next decade and beyond. 


>The US. Russia, China, France and Israel are developing cyber- 
arsenals and the means to wage all-out cyberwarfare. 


> Terrorist groups are developing we apons of mass disruption. 


> Russia has become a breeding ground for computer 
hackers. The Russian equivalent of the U.S. National Security Agency and 
organized crime groups recruit the best talent. 


> Electronic stock scams, robberies and extortionsa are cat 


Helping Microsoft Not an Easy Undertaking 


zky. He credited the success of 
Microsoft applications for the 


Government’s case 
could get stronger 


BY PATRICK THIBODEAU 
Despite Microsoft Corp.’s re- 
cent warning of bad financial 
times ahead, the company’s 
market share in PC operating 
systems and servers may be ex- 
panding, according to new re- 
search data from IDC. 

The data may be used by the 
U.S. government to underscore 
its point that Microsoft — de- 
spite whatever financial prob- 
lems it now faces — continues 
to be a monopoly, said legal 
experts. 

“Microsoft is not losing 
ground,” said Dan Kusnetzky, 
an analyst at IDC in Framing- 
ham, Mass. 

Microsoft recently warned 
that profits wouldn’t meet ex- 
pectations for the year-end 
quarter because of an econom- 
ic slowdown. But market data 
due to be released later this 
month will show a slight in- 
crease in the company’s 87% 
market share in operating sys- 
tems, reported in 2000, as well 
as an increase over its 38% of 
the server market, said Kusnet- 


| company 


increase. 

The falloff in PC sales “may 
reduce the value of Microsoft’s 
monopoly but not the monop- 
oly itself,’ said Stephen D. 
Houck, former lead trial coun- 
sel for the 19 states involved in 
the case against Microsoft and 
now an attorney at Reboul, 
MacMurray, Hewitt, Maynard 
& Kristol in New York. 

The government late next 
week is scheduled to file its 
brief asking the U.S. District 
Court of Appeals not to over- 
turn trial Judge Thomas Pen- 
field Jackson’s ruling last year 
that the company broke an- 
titrust laws. The ruling called 
for a breakup of the company, 
separating its operating sys- 
tems business from its other 
lines of business. 

Microsoft disputes the gov- 
ernment’s claim that it is a mo- 
nopoly and says Windows is 
being challenged by a variety 
of operating systems, such as 
thin clients and Internet appli- 
ances. In its brief to the ap- 
peals court in November, the 
also denied any 
wrongdoing. 

A potential wild card for this 


case is the impact of the in- 
coming Bush administration. 
Through appointments at the 
U.S. Department of Justice 
(DOJ), particularly in its an- 
titrust division, the new 
ministration could ease the 
hard-line against the 
company and be more open to 
settlement, say legal experts. 
But some end users hope that 
doesn’t become the case. 

Tim Fake, IT director at Lan- 
caster Newspapers Inc. in Lan- 
caster, Pa., said he doesn’t be- 
lieve Microsoft has done much 
wrong and that he is support- 
ive of the company. But the 
Bush administration “should 
let the legal system run its 
I’m not sure it’s that 
important, where the presi- 
dency has to be involved.” 

Ron Wells, information sys- 
tems director at Carolina 
Turkeys Inc. in Mount Olive, 
N.C., said he doubts that the 
new administration will inter- 
vene. “I just think they have 
bigger priorities,” he said. 

In any event, it won’t be easy 
for the Bush administration to 
influence this case. First, the 
pace of the appeals case is 
moving faster than any new 
DOJ appointments. Second, 


ad- 


tactics 


course. 


the Bush DOJ appointments 
have to be confirmed, and that 
would mean testifying before 
Senate Judiciary Committee 
Chairman Orrin Hatch (R- 
Utah), who has expressed re- 
peated concern about Micro- 
soft’s practices. Third, the case 
also involves 19 states that may 
continue to pursue it, no mat- 
ter what the White House does. 

Helping out Microsoft at this 
point may carry with it “a 
heavy political said 
William Kovacic, a law profes- 
sor at George Washington Uni- 
versity in Washington. He said 
he believes George W. Bush’s 
best course would be to “stand 
behind the principal of the rule 
of law” and let the appeals 
process proceed. B 


cost,” 





Bush and Microsoft. 


The Bush administration’s 
ability to affect Microsoft’s 
appeal faces three obstacles: 
NOT ENOUGH TIME 
= The appeals process is 
moving too quickly. 
CONGRESS 
= Antitrust supporters will 
scrutinize DOJ appointments. 
STATES 
® As parties to the case, states 
can proceed on their own. 








hacking tech 
trade 


a rising concern 


countries 
niques to 
tions are 
Jeffrey Hunker, senior dir 


to use 
evade sanc 


said 


for critical infrastructure 
tection at the White House 
Hunker said officials are also 
becoming increasingly con 
cerned with the proliferation of 
“always-on” Internet appli 
ances, such as modems and 
network printers. Hackers are 
finding ways to penetrate these 
devices and possibly use them 
as launching pads for 
devastating distributed 
attacks, he said 
a hacker cracked 
into a printer at the Navy’s 
Space and Naval Warfare 
ter and rerouted a potentially 


denial 
of-service 


Last year, 
Cen 


sensitive document to a server 
in Russia. 

Stephen Northcut, director 
of the Global Incident Analysis 
Center at the SANS Institue in 
Bethesda, Md., 
day recently, his cable modem- 
equipped laptop 
probes, two of which penetrat- 
“Our 


said that in one 
received 54 


ed his personal firewall. 
systems come to us hackable,” 
said Northcut. “ 

Winn Schwartau, 


It’s a feature 
founder of 
security consultancy Interpact 
Inc. in Seminole, Fla., 
real threat comes from the de- 
sign of the U.S. infrastructure 
and the people who run it. 

“We built these systems and 


said the 


our business models on the as- 
sumption that things will al- 
ways work,” said Schwartau. If 
a major attack is made on the 
infrastructure, “it’s 
happen from the inside,” he 


going to 


said. 

Tim Atkin, a member of the 
National Partnership for Criti- 
cal Infrastructure Security and 
director of critical infrastruc- 
ture protection 
firm SRA International Inc. in 
Fairfax, Va., said the 
hold a “ 
the national cybersecurity ef- 
fort. He added, however, that 
future preparedness will be de- 
termined by how much em- 
phasis companies and the gov- 
ernment place on 
known vulnerabilities, training 
and education and enforcing 
good security policies. 

Dan Morrison, 
the risk consulting 
Arthur Andersen LI Ot- 
tawa, said although the ton 
of terrorists attacking 
the infrastructure is real, a 
word of caution is needed. “It’s 
scary, but it’s really hard to 
bring down the Internet.” D 


at consulting 


reports 
powerful message” for 


fixing 


a partner in 
gre ny at 
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groups 
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Digital Angel to —_ - = Guardian Angel 


How Digital Angel works 


F o r j t 
fatch Over Patients "errr sin. Sgaaics 


5 transmitter 


But some fear system could be Big Br tof f tal An- | # The device monitors the 
. . . ‘ fad text Peeey wer health and location of the 


patient and periodically trans 
mits information to a central 
monitoring station 


BY BOB BREWIN 


# When the biosensors 
indicate an event that re 
quires medical assistance, 
the control center dispatches 
personnel to the scene, which 
is located by a GPS receiver. 


# In location mode, the sys 
tem will help the control 
station monitor the location of 
Alzheimer’s patients, who 
tend to wander out of assist 
ed-care facilities, allowing 
quick intervention by facili 
ty personnel. 


Expanded P 


Eleventh-hour rules 
spur health industry, 
advocate sparring 


BY JULEKHA DASH 
lintor 
ver, has es 


the HIPAA will 


on hospi 
id health 


to estab 


patient 


pointing 


comfy 
eer pplv health x s we pat t ign a one-time : ured bv the I accessing health rec 
Privacy Issues se — nd writter employment purposes 
nA ‘ if . id ur Claudine Singer, a senior an 


New Health Data Requirements es eee 


sald 





The new patient privacy rules introduced by the Clinton admin- while the HIPAA will have an 
istration last month apply to written, oral and electronic commu- enormous impact on the health 
nications. They state the following: care industry in the long run, it 


® Health care providers are prohibited from releasing most will some time before 
information about individual patients without getting their iges occur. Most health 
consent in advance. care organizations will have 
Bee PE ° EEA ¢ bie EE SS RT al WO vears to Com ly with the fi 

® Patients are granted the right to see a copy of their records and ee é I eo : it 
Kou R Sages ‘ nal ru ad st ler health 
be notified of how providers plan to use their information. weir tans “4 ar bia 
are groups an community 

il fines of $100 per violation can be imposed upon hospitals have three years 

providers, up to a total of $25,000 per year, and criminal ‘Don't 
penalties of as much as $250,000 and 10 years in prison can be 


levied against individuals selling health information. 


expect) enormous 
change tomorrow in your doc 
tor’s office,” Singer said. D 








Digital An 
Watch O 


But some fear system could be Big Brother 


BY BOB BREWIN 
UARDIAN ANGELS 
have gone digital. 
And they have to 
worry about pri- 
vacy. 

Applied Digital Solutions 
Inc. has developed a wearable 
system called Digital Angel 
that features medical sensors, 
a Global Positioning System 
(GPS) location chip and a 
wireless transmitter that can 
summon medical assistance 
for people who might other- 
wise be unable to obtain it. 

According to the Palm 
Beach, Fla.-based company, 
Digital Angel will also help 
adult assisted-care facilities lo- 
Alzheimer’s disease pa- 
tients, who tend to wander, in 
addition to helping parents 
monitor the location of their 
autistic children. Applied Digi- 
tal also plans to use its technol- 
ogy to help people find lost 
pets. Its first product is due for 
introduction next month. 

Craig Mathias, an analyst at 
Farpoint Group in Ashland, 
Mass., called the use of loca- 
tion technologies for patient 
care a “hot topic,” with a num- 
ber of companies angling to get 
into the market. Pinpoint Corp. 
in Billerica, Mass., has already 
installed its systems — which 
use a network of indoor anten- 
nae to track radio tags worn by 
patients — at California Clini- 
cal Trials, an adult care facility 
in Beverly Hills, Calif. 


cate 


Privacy Issues 

Mathias said that while pa- 
tient location technology has 
attracted developers, it raises 
serious privacy concerns. 
David Sobel, a lawyer at the 
Washington-based £lectronic 
Privacy Information Center, 
said he has a “lot of discomfort 
with devices that track peo- 
ple’s whereabouts.” 

Location technology is “the 
hot new privacy issue,” Sobel 
said. “If states already have pa- 
tients’ bills of rights [for nurs- 
ing homes or assisted-care fa- 
cilities], maybe there has to be 


a 2lst-century revision that 
covers location information.” 
Richard Smith, a privacy pol- 
icy expert at the Privacy Foun- 
dation in Denver, said that al- 


| though he considers the ability 


to find an Alzheimer’s patient an 
“acceptable” use, he’s also con- 
cerned about potential abuses. 

For example, Smith said, a 
suspicious husband could take 
a pet’s device to follow the 
movements of his spouse. 
“Someone could buy a pet 
tracker, throw it in their 
spouse's car and find out where 


NEWS © 


el to 
ver Patients 


they have been,” he said. 
Peter Zhou, president of Ap- 
plied Digital Solutions’ Digital 
Angel.net Inc. subsidiary, em 
phasized that Digital Angel is a 
location determination system 
rather than a tracking device. 
“It does not have enough 


| battery power to constantly 


monitor people,” Zhou said, 


explaining that Digital Angel 


| transmits location information 
| only intermittently. 


“If someone is to have a 


| heart attack, privacy is not the 


issue; safety of life is their main 
concern,” Smith said. The loca- 
tion information derived from 
the Digital Angel GPS clip — 
which performs triangulation 


on a fleet of 24 satellites and 
pinpoints a location to within 
10 meters — will allow medical 
personnel to quickly arrive at 
an emergency scene and start 
providing assistance. 

Keith Bolton, Applied Digi- 
tal’s chief technology officer, 
said the biosensor and location 
information from Digital An- 
gel is fed into middleware that 
then pinpoints the chip wearer 
on a map displayed on a secure 
Web page. 

Zhou said Digital Angel next 
month will introduce a pager- 
size pet tracker, with smaller 
wristwatch-size devices to 
come that incorporate biosen- 
sors for use with humans. 

Zhou dismissed concerns 


about the possibility of a re- | 


pressive government 


using | 


such devices to track the mass- | 


sible for evil uses of his prod- 


| es. “An inventor is not respon- | 


| 
| 


ucts,” he said. “No one blames | 


the atom bomb on Einstein.” D 


Expanded Privacy Rules Perpetuate Debate 


Eleventh-hour rules 
spur health industry, 


advocate sparring | 
eect | tient privacy,” she said. “In 
| practice, [health records] re- 


BY JULEKHA DASH 
President Clinton’s last-min- 
ute introduction of sweeping 
federal rules to protect patient 
privacy has sparked a new 


| round of debate in the health 
| care industry, which has been 


awaiting the privacy regula- 


| tions for the past five years. 


While health privacy advo- 


| cates said they favor the rules, 
which 


Clinton announced 
Dec. 20, critics said the unex- 
pected move by the adminis- 
tration to apply health privacy 
protection to oral and written 
communications will add un- 
necessary complexity to an in- 


| dustry that’s already heavily 


regulated. The original pro- 


| posal applied only to electron- 


ic records. 
“Does the government have 


| the right to regulate every sin- 


gle letter that a doctor writes 


| about a patient?” said Mark An- 


derson, a vice president at Meta 


| Group Inc. in Stamford, Conn., 
| anda former hospital CIO. 


But Zoe Hudson, a senior 


| policy analyst at the Health 
| Privacy Project at Georgetown 





University in Washington, said 
the regulations are necessary 
to protect patient privacy. 
“Until now, there has been 
no federal law that protects pa- 


ceive less protection than fi- 


nancial records or even video | 
| rental records.” 


Critics said president-elect 


| George W. Bush could make 
| additional 
| Health Insurance Portability | 
and Accountability Act of 1996 | 


changes to the 


(HIPAA) after he takes office 


| on Jan. 20. Bush’s office didn’t 
immediately 
| calls seeking comment. 


return phone 


Under the rules, health care 
organizations would need to 


| have patients sign a one-time 


consent agreement allowing 
their health data to be shared 
for billing and treatment pur- 
poses. Patients must also be 
given detailed written infor- 
mation about their privacy 
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Guardian Angel 


How Digital Angel works: 


# A patient wears a micro- 
chip that contains biosen- 
sors, a GPS receiver and a 
wireless transmitter. 





® The device monitors the 
health and location of the 
patient and periodically trans- 
mits information to a central 
monitoring station. 


= When the biosensors 
indicate an event that re- 
quires medical assistance, 
the control center dispatches 
personnel to the scene, which 
is located by a GPS receiver. 


= In location mode, the sys- 
tem will help the control 
station monitor the location of 
Alzheimer’s patients, who 
tend to wander out of assist- 
ed-care facilities, allowing 
quick intervention by facili- 
ty personnel. 








Applying the medical priva- 
cy rules to paper and oral com- 
munications shouldn’t have 
much impact on IT workers, 
said Scott Cebula, executive 
director of information ser- 


| vices at MemorialCare in Long 


rights and be informed of any | 


planned use of their personal 
information. Failure to comply 
with the regulations could re- 
sult in civil fines or criminal 


| ° 
| charges against those who sell 


health information. 

The regulations, which were 
prepared by the U.S. Depart- 
ment of Health and Human 
Services, are the final version 


of proposed rules that were is- 


sued a year ago, after Congress 
failed to pass comprehensive 
medical privacy legislation as 
required by the HIPAA. 





Beach, Calif. 

According to the American 
Hospital Association in Chica- 
go, the privacy rules will cost 
hospitals as much as $22.5 bil- 
lion over five years. The Clinton 
administration, however, has es- 
timated that the HIPAA will 
cost the entire health care in- 
dustry $17.6 billion over 10 years. 

The act also calls on hospi- 
tals, health insurers and health 
care clearinghouses to estab- 
lish procedures for protecting 
patient privacy, such as ap- 
pointing executives to oversee 
their internal procedures. And 
companies are prohibited from 
accessing health records for 
employment purposes. 

Claudine Singer, a senior an- 
alyst at New York-based Jupiter 
Media Metrix Inc., said that 
while the HIPAA will have an 
enormous impact on the health 
care industry in the long run, it 
will be some time before 
changes occur. Most health 
care organizations will have 
two years to comply with the fi- 
nal rules, and smaller health 
care groups and community 
hospitals have three years. 

“Don’t expect enormous 
change tomorrow in your doc- 
tor’s office,” Singer said. D 
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Or is it becoming,c one? 


The problem: your network is slowing down productivity, sales and even growth. The solution: BellSouth. 
We can give your company a data network that’s not only faster, but also smarter and more efficient. 
By reconfiguring your existing infrastructure, we can give your network more functionality, so it can handle 
duties like transaction processing, data warehousing, security, storage and other more customized tasks 
that can help your business evolve. We'll also work with you to devise a comprehensive migration plan to 


keep you a step ahead of the competition, and make the future virtually unlimited. 


>>>connect>>and create something” 
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BRIE 
Microsoft to Buy 
Great Plains Software 


Microsoft Corp. said it will buy 
Fargo, N.D.-based business soft- 
ware developer Great Plains Soft- 
ware Inc. in a $1.1 billion stock-swap 
deal that propels Microsoft into the 
corporate applications market - po- 
tentially putting it in competition 
with other vendors that support its 
operating systems and SQL Server 
database. Great Plains will continue 
to develop, market and support its 
current line of business manage- 
ment software, Microsoft said. 


Oracle Extends SIM 
Bet for Speedy Sites 


Oracle Corp. said it’s extending its 
Web site performance guarantee to 
all customers of San Jose-based 
e-business software vendor BEA 
Systems Inc. Oracle CEO Larry Elli- 
son originally made the guarantee 
in October during the annual Oracle 
OpenWorld conference, where he 
pledged $1 million to any company 
whose Web site doesn't run at 
least three times faster using the 
Oracle9i Application Server than it 
does using Microsoft Corp.'s SQL 
Server or IBM's DB2. 


Filtering-Software 
Law OK'd By Congress 


As part of its final budget agree- 
ment, Congress last month approved 
legislation that will require the use 
of filtering software at schools and 
public libraries. The Children’s Inter- 
net Protection Act requires software 
that will block material considered 
“harmful to minors.” But the Ameri- 
can Civil Liberties Union said the 
use of this software in libraries is 
censorship and that it plans to make 
a legal challenge. 


Yahoo Seeks U.S. Help 


Yahoo Inc. on Dec. 21 asked the 
U.S. District Court in San Jose to 
enter a ruling declaring that the 
French government has no jurisdic- 
tion over the company. The filing 
was prompted by an order issued 

in November by a French court 
demanding that Yahoo prohibit the 
sale of Nazi artifacts from its online 
auction site to users in that country. 
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Microsoft Tweaks 


Windows Certification 


Changes stir discussion, but IT managers see need for new exam 


BY CAROL SLIWA 
r YEAR'S END, Mi 
crosoft Corp. ex- 
tended the dead- 
line for IT profes- 
sionals who wish 
to take its Windows NT 4.0 
certification exam and created 
a new NT test that can be used 
as an elective toward the Win- 
dows 2000 certification. 

But the fact 
Microsoft Certified 
Engineer (MCSE) credentials 
based on the existing NT 4.0 


remains that 
Systems 


exam will expire at the end 
of 2001, and anyone who wants 
MCSE status must upgrade 
to the Windows 2000 track to 
retain certification. 


Keeping Up Is Key 

Those changes have upset 
some IT professionals [News, 
May 22] and stirred controver- 
sy in an online community fo- 
rum on Computerworld’s Web 
site (www.computerworld.com). 


But several IT 
who make hiring and training 
decisions said they understand 


managers 


Microsoft’s position and ex- 
pect certified professionals to 
be up to speed on a company’s 
latest technology. 

“That’s their new product. 
Why wouldn't they” encourage 
IT professionals to get certi- 
fied on Windows 2000? asked 
Wayne Richards, a senior tech- 
nical support analyst at The 
Goodyear Tire & Rubber Co. 
in Akron, Ohio. 

“I already have three [peo- 
ple) certified [for 
2000]. It’s all about being ahead 


Windows 


of the game. I think Microsoft 
is correct in giving businesses 
a little push. They’re just rais 
ing the bar and saying, ‘Let’s 
said Susan McKay, 
vice president of customer and 


get going,’ ” 


information systems at Aircast 
Inc. in Summit, N,J. 

“How long do we expect an 
operating system to last these 


days? Every software company 
has got to decide how long 
to carry support and how long 
to keep back 
said Bob Dutile, a senior vice 


issues going,” 


president in IT at KeyCorp in 
Cleveland. “I don’t see Micro- 
soft as being that different than 
anyone else out there.” 


Experience Still Counts 

Dutile said he recognizes the 
value of certifications and in- 
vests in supporting employees 
who seek them. “We under- 


stand certification at the end of 


the day means you passed a 
test. It doesn’t tell you every- 
thing. Experience is an addi- 
tional factor,” he said. 

One CIO at a national retail- 
er said, “These days, you al- 
most question why a network 
engineer with three to five 
years’ experience doesn’t have 
that certification. It wouldn't 
be a deal killer. But we defi- 
nitely look at it, and it gives an 
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edge [to a candidate].” 

Yet, cognizant that 
companies still may be run- 
ning NT networks, the CIO 
also was sympathetic to the 
plight of NvT-certified engi- 


many 


[of Microsoft] to say you’re no 
onger certified if you're run- 
ning an NT 4.0 shop. Anybody 
in that position is working a 
lot of hours in tough jobs. It 
would be a difficult situation 
for them” to work in the time 
to get the Windows 2000 certi- 
fication, he said. 

The deadline to take Micro- 
soft’s Windows NT 4.0 certi- 
fication exam originally was 
Dec. 31. But the company ex- 
tended the availability of the 
exams until Feb. 28 to accom- 
modate had 
trouble scheduling tests. 

Microsoft also is creating a 
new certification exam to test 
skills needed to maintain a 
Windows NT Server 4.0 net- 
work. The 
skills required to perform in- 
cremental upgrades to Win 
dows 2000 servers. 
the new 
which is due 
form in the second quarter, 
earns the recipient the Micro- 
soft Certified Professional cre- 
dential. But the new NT 4.0 


candidates who 


exam also tests 


NT 4.0 
in beta 


Passing 


exam, 





Microsoft Explains Program’s Effect on Systems Pros 


[a parallel NT 4.0 track], and one 
of the things our customers are 
telling us is, keep it simple 


Changes to the MCSE certification 
program, introduced with the roll- 
out of Windows 2000, have stirred 
up controversy among some IT 
professionals. (See story above 
and Computerworld’s Windows 
2000 Community at Attp. 
198.112.59.4/cworld_ forums, 
Forum3/HTML/000148. htm!) 

Computerworld technology eval- 
uations editor Robert Mitchell last 
month spoke with Anne Marie 
McSweeney, Microsoft's acting 
director of certification skills and 
assessment, about those changes 
and how they'll affect IT profession- 
als and their managers. 


Q: Some aspiring MCSEs say 
they can’t finish their MCSE NT 
4.0 track in time to make the 
deadline. NT 4.0 MCSE candi- 
dates are also rushing to com- 
plete at least three NT 4.0 core 
exams so they can qualify for the 
accelerated exam. Do you feel 
that extending the deadline to 
Feb. 28 addresses those con- 
cerns adequately? 


A: | believe that it does. We believe 
that it addresses a good portion of 
those people because it gives you 
two more months. Even people 
who had five exams to go were 
really planning on finishing. So we 
think this two months’ extra time 
will alleviate some of that 


Q: With the introduction of Win- 
dows NT 4.0, many previous 
core requirements and electives 
still counted toward the MCSE. 
With Windows 2000, this isn’t 
the case. Couldn't this change 
have been more gradual? 

A: Our biggest driving factor in all 
of this is, how can we make this 
credential relevant in the industry? 
[That's] because the credential is 
only as valuable as hiring man 
agers see it. And at this time, hir- 
ing managers see value in keeping 
up-to-date with technology. As 
well, we looked at a lot of fore- 
casts as to when people were go 
ing to implement Windows 2000. 
So it's those things that [moved] 
us in this direction. We considered 


Q: Some MCSEs have been reluc- 
tant to move to the Windows 
2000 track. They say they don't 
want to find themselves in the 
situation where they have to 
retake most of the exams again 
in another year or two. How do 
you respond? 

A: The MCP [Microsoft Certified 
Professional] program is going to 
try to keep pace with the industry 
If the industry slows down, we'll 
slow down, too. It’s unlikely that 
the industry or us would make 
people update the technology in 
one year. When we announced 
this change, people really had 18 
months. So there’s been a pretty 
long life span on NT 4.0. 

Some people are a little bit 
worried about Whistler, and | think 
that might be driving some of that 
uncertainty. The two tracks will 
run in parallel, so that people who 
have taken the Windows 2000 





exams will not have to take the 
Whistler exams in order to keep 
their certifications up-to-date. 


Q: Some IT managers have 
complained that with the MCSE 
program changes announced in 
2000, Microsoft was trying to 
force them into migrating to 
Windows 2000. 

A: | have heard that from individuals 
| have not heard that from man- 
agers. The response to Windows 
2000 has been overwhelmingly 
positive. We don't want certification 
to force their hand. We anticipate 
that they will move to Windows 
2000. . . for business reasons. 


Q: Microsoft estimates there are 
350,000 MCSEs out there today 
and expects the changes in the 
current program will halve that 
number. How do these changes 
benefit the hiring managers? 

A: Remember that there's the MCP 
credential. We don’t expect that 
[drop] on the MCP side. If you take 
just one Win 2000 exam, you are 
an MCP, so that will help hiring 
managers [find] someone who can 
install Win 2000 Professional. B 
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test can be applied only as an 
elective credit toward MCSE 
certification, which now tests 
Windows 2000 skills. 

IT professionals who have 
passed all three of the old Win- 
dows NT 4.0 exams qualify 
to take Microsoft’s accelerated 
exam for the MCSE credential 
in Windows 2000. 

The MCSE designation in 
Windows 2000 normally re- 
quires four core exams, a de- 
sign elective and two other 
electives. Passing the acceler- 
ated exam, which can be taken 
once free of charge, meets 
the requirement for four core 
exams. The accelerated exam 
will be offered until the end of 
next year. 


Comes with the Territory 

“IT professionals know that 
learning and retesting are just 
a part of the industry,” said 
Michael Adams, a network ad- 
ministrator at DuPont Beau- 
mont Federal Credit Union in 
Nederland, Texas. Adams has 
the MCSE certification. 

“We will always be forced to 
keep up with technology, even 
if that means retesting in a new 
[network operating system],” 
Adams said. “The new exam, 
the extension of the testing 
deadline and the looming expi- 
ration of the MCSE NT 4.0 
track are all just background 
noise in the busy IT world.” D 
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End of Volume Discounts Shuts Door on ‘Consumer’ Windows 


Changes could affect some corporate users, 
but many say plan won’t be a problem 


BY CAROL SLIWA 
Microsoft Corp. announced 
late last month that it will dis- 
continue volume licensing for 
Windows 95, 98 and Millenni- 
um Edition (Me), a move that 
some industry analysts and 
end users called a rather trans- 
parent attempt to push compa- 
nies to the new Windows 2000 
Professional desktop operating 
system. 

According to a Microsoft 
spokeswoman, the decision re- 
flected “declining demand for 
consumer Windows.” But ana- 
lysts noted that Windows 95 
and 98 have been in heavy use 
at many corporations, and they 
said they expect some com- 
panies to be affected by the 
changes. 

Yet several corporate users 
with 
world said they don’t expect 
the discontinuance of volume 
licensing for Windows 95/98 to 
affect their companies to any 
significant degree, so it’s un- 
clear what the overall impact 
will be on corporations. 

“It’s not unusual for me to 
speak with [clients] who are 


who spoke Computer- 


Invensys Moves to Reassure 
Baan CRM Software Users 


New CRM unit 
plans to add Web 
support, features 


BY MARC L. SONGINI 
Invensys PLC next year plans 
to beef up the customer rela- 
tionship management (CRM) 
software it bought when ac- 
quiring ailing Baan Co. by 


adding Web support and other | 


new features. Some Baan users 


greeted the plans with relief | 
and said they had become | 
concerned about the future of | 


the applications. 
“We had started with Baan, 


and when they went through | 


their troubled times, we were 
holding our breath to see what 


would happen,” said Eugene 
Connor, CRM business man- 
ager at RMC Industries Corp. 
in Decatur, Ga. 


Two Products Dropped 
London-based Invensys said 
it intends to phase out two of 
Baan’s CRM products — a 
sales force automation tool 
called Matrix and _ product 
modeling software called Clas- 
sys. The remaining CRM line 
will be split off from Baan and 
folded into a new Invensys 
CRM unit in Golden, Colo. 
Baan’s major CRM package 
— what used to be known as 
Baan FrontOffice — will be- 
come 
year, according to Invesys offi- 
cials. They also said the com- 
pany expects to add new CRM 


Web-enabled within a 


nearly 100% Windows 95 who 
never adopted 98,” said Michael 
Silver, an analyst at Gartner 
Group Inc. in Stamford, Conn. 
“We still speak with 
enterprises who still need, for 
whatever 
Windows 9x 


some 


reason, to deploy 
into [2001] be- 
cause they haven't tested Win- 
dows 2000 or they’re not sure 
how to do it, or they’re waiting 
to do their servers first.” 

“After a new product is re- 
leased, it takes about five years 
for the old product to wind 
down,” said Al Gillen, an analyst 
at IDC in Framingham, Mass. 


“There is still a fair amount of 


demand for [Windows] 98.” 
Microsoft program manager 
Simon Hughes said the com- 
pany “believes that we’ve pro- 
vided sufficient time with this 
announcement to allow custo- 
mers who have a specific busi- 
ness need to deploy Windows 
95 or Windows 98 to plan their 
purchases and deployments.” 
Hughes said customers can 
still purchase volume licenses 
for Windows 95/98 “for imme- 
diate or future use” through 
June 30. Only customers with 


tools aimed at indirect sales 


workers, as well as 
improved sales-configuration 
software and prod- 
ucts for use on per- 
sonal digital 
tants and other hand- 
held devices. 

Connor noted that 
he’s pleased with the 
changes under way 
at Invensys. RMC, a 
maker of 
building supplies that 
uses Baan’s sales force 
automation, customer 
tracking and contract- 
ing applications, has 
already seen an im- 
provement in 
tomer 
Invensys took over the strug- 
gling software vendor, Connor 
added. “Baan’s service was lim- 
ited and at times troublesome,” 
he said. 

Invensys took control of Baan 
in August in a $709 million deal 
after the Barneveld, Nether- 
lands-based maker of business 


assis- 


concrete 


cus- 


service since 


INVENSYS CRM 
CEO KARULF: 
Confusion should at 
be minimal be- 
cause Baan and 
Invensys are still 
part of the same 
overall company. 





Dut the Window 


ing programs: 
Windows Me: 
Windows 95/98: 


Consumer Windows 
Upgrade Advantage: 


Open (five to 500 PCs) or Se- 
lect (more than 500 PCs) 
agreements will be affected. 
“It’s being perceived by the 
market 
which comes at an unfortunate 
time,” said Rob Enderle, an 
analyst at Cambridge, Mass.- 
based Giga Information Group 


as a price increase, 


Inc. “There’s already a lot of 


compar..2s that look at Micro- 
soft like a taxing entity, and 
that 
[an- 


fuel 
this 


you don’t want to 
belief. I’m afraid 
nouncement] did.” 
Still, Computerworld had no 
problem finding 
users who said they wouldn't 
be affected by the Windows 
95/98 volume licensing discon- 
tinuance. Windows Me, pri- 


corporate 


applications had lost money for 
eight straight quarters. 
Todd Roeller, the CRM tech- 
nology manager at 
Flowserve Corp., an 
Irving, Texas-based 
maker of liquid-flow 
control products, said 
he welcomes the 
changes that Invesys 
plans to make. 
~ “We're delighted,” 

Roeller said, adding 

that some end users 
Flowserve 
concerned about us- 
ing technology “that 
might go away.” 
Flowserve has been a 
Baan user for three 
years and relies on 
its sales configuration engine, 
among other products. The 
company is interested in the 
upcoming indirect sales soft- 
ware that Invensys has in the 
works, said Roeller, noting that 
the company next month plans 
to roll out a Web-based system 
that will let it make estimates 


were 


marily a consumer product, 
wasn’t an issue for any of 
them Windows 95 


and 98 coming to the end of 


“We see 


their life cycles anyway,” said 
Bob Dutile, a senior vice presi- 
dent at Cleveland-based Key- 
Corp. Dutile said his company 
has roughly 12,500 

Windows 95, but he 


users on 
said he 
need 


doesn’t expect to 


KeyCorp 


new 
licenses. also has 
another 6,500 users running 
Windows NT 4.0, he added 

“We're trying to move ag 
gressively to thin clients, and 
we will be planning what, if 
anything, we’re going to do 
Windows 2000 as a 
client,” Dutile said 

Guaranty Bank & Trust Co. 
in Oklahoma City is mainly an 
NT shop with “only 
and 98s,” said 


with 


1 few 95s 
Tom Doutey, a 
vice president in IT, who noted 
that his company won't be 
affected by the volume licens 
ing changes. “From a business 
point of view, I understand why 
(Microsoft is] doing it,” he said. 

“It’s the nature of the beast,” 
agreed Susan McKay, a vice 
president of customer and in- 
formation systems at Aircast 
in Summit, NJ. “I really 
don’t think this is some big 


Inc. 


plan on Microsoft’s part to 
drive the world crazy.” D 


and place orders online. 

Bob Karulf, president and 
CEO of Invensys CRM, ac- 
knowledged that the unit’s sep- 
aration from the rest of Baan 
might confuse some users. But 
he said that should be minimal, 
because Baan and 
CRM are still part of the same 
overall company. 


Invensys 


Tough Competition 

Despite the initial reaction 
from installed-base users such 
as Roeller and Connor, Inven- 
sys could still have a tough 
time competing for new cus- 
tomers against the likes of 
Siebel Systems Inc. in San 
Mateo, Calif., and other CRM 
rivals. 

Baan had neglected its CRM 
suite more than any other part 
of its product line, said Kelly 
Spang, an analyst at Current 
Analysis Inc. in Sterling, Va 
The plan devised by Invensys 
CRM “sounds really good, but 
the proof will be in the execu- 
tion,” Spang said. D 
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O]s 
POINT OF VIEW 


Compag Integration2000 delivers enterprise 
e-commerce solutions 


Integrating enterprise applications focamy. 
got a boost with Compaq's Integration2000. 
he initiative helps solve the largest, most 
difficult business integration problems. 
www.windows2000advantage.com/pov/ 

12-11-00_integration.asp 


TECH EDGE 


Understanding Microsoft Application 
Center 2000 


The automatic detection and system resolu- 
tion functions of Microsoft Application Center 
2000 eliminate mundane administrative tasks 
and assure system availability without direct 
system administrator intervention. 
www.windows2000advantage.com/ 
tech_edge/11-27 O0_undersfanding.asp 








Rosa 


Brian Valentine, “chief cheerleader,” driving 
force 


Brian Valentine is a key player in Microsoft's 
Windows division, where, in addition to being 
“chief cheerleader,” as he describes himself, 
he is also a driving force behind the evolution 
of Windows 2000. 
www.windows2000advantage.com/qa/ 
11-20-00_valentine.asp 


COLUMNS 


Active Directory: to serve, protect, provision 


The great thing about directories is that they 
provide a singular place for eee stor- 
ing important enterprise data. The bad thing 
about directories is that they provide a singu- 
lar place for defining and storing important 
enterprise data. 
www.windows2000advantage.com/columns/ 
11-27-00_activedirectory.asp 


“CASE STUDIES 


Windows 2000 Group Policy can cut support 
costs, but requires up-front planning, train- 
ing and testing 


How wouid you like to cut your support calls 
by 60%? Or manage 150 sites worldwide with 
only two system administrators rather than 
one at each site? 
www.windows2000advantage.com/ 
case_studies/11-06-00_grouppolicy.asp 


NEWS > 


Compag, Andersen Consulting in enterprise bid 
Compaq and Andersen Consulting have expanded their relation- 
ship to put Andersen's new and existing enterprise applications 
on Compag ProLiant servers running Microsoft Windows 2000. 


For the full story, visit:www.windows2000advantage.com/news/ 
12-11-O0_bid.asp 


CASE STUDY> 


FreeMarkets guarantees uptime with server clustering 
Using Datacenter Server, this business-to-business firm is matching 
increased customer demand with proportionally increased computing 
capacity while maintaining “mainframe stability.” 


For the full story, visit: www.windows2000advantage.com/300 


Q&A> 


Active Directory worth the internal Unix strife 
Dan Kunetzky, vice president of systems research at 
International Data Corp., says that Windows 2000 is headed 
down a successful path. He also weighs in on a wealth of addi- 
tional Windows 2000 topics, including the value Compaq and its 
“fine machines” bring to Microsoft Windows 2000. 


For the full story, visit: www.windows2000advantage.com/300 


MOMENTUM SERIES > 


Active Directory helps to keep VPN management 
simple and effective 

When companies set up VPNs, they have to maintain a list of authorized users 
and have some means of ensuring that anyone who is granted access to the 
VPN is on the list. Authentication mechanisms can range from a user name 
and password to a public key infrastructure (PKI) system that uses digital cer- 
tificates. 


For the full story, visit: www.windows2000advantage.com/ 
momentum/11-20-00_vpn.asp 


www.Windows2000Advantage.com/300 











GENERATION 2000 > 


Microsoft Mobile Information 2001 Server 


enabling mobile users to go wireless 

In anticipation of high projected wireless mobile Web and e-mail access 
demand, Microsoft's Mobile Information 2001 Server — which was intro- 
duced as part of the .NET enterprise server line — was created with 
Microsoft Windows 2000 mobile users in mind. Expected to become avail- 
able during the first half of this year, Mobile Information 2001 Server will 
offer not only e-mail access, but access to calendaring and other wireless 
applications such as customer relationship management (CRM) and 
accounting. 

The new server will be located in corporate networks next to the 
Exchange 2000 Server. In this environment, information destined for wire- 
less users will be transferred from the Exchange 2000 Server to the 
Mobile Information 2001 Server, which in turn will send the data over the 
Internet to a wireless phone carrier. The wireless carrier will reformat the 
information for mobile phones, and transmit it over the airwaves to the 
appropriate recipient. Mobile users will be able to send e-mail or other data 
along a reverse path back to the Mobile Information 2001 server. 

In addition, Microsoft will deliver a different version of the server for 
wireless telephone carriers. That server will allow wireless telephone firms 
to deliver corporate e-mail and other intranet data to mobile users more 
efficiently than would a corporate mobile information server. 

“This is a key first step in our strategy of enabling enterprises to give 
their employees access to all the information inside the corporate firewall,” 
says Patrick Fox, director of marketing for Microsoft's Mobility Group. 

Some analysts believe Mobile Information 2001 Server is entering the 
market just as demand for wireless enabled applications is taking off. 


For the full story, visit: www.windows2000advantage.com/ 
2000gen/12-04-00_mobile.asp 





QUOTE OF THE WEEK > 


“Integration2000 doesn’t force you to 
abandon your existing, tightly-coupled 
legacy solutions. But since the world 
you have to connect to is expanding 
pretty dramatically, the chances are 
good that you will need to get content 
from some third party or hosted 
services, and this strategy will help.” 


— Dwight Davis 
vice president 
Summit Strategies 
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your primary source of timely, useful information for planning 
and implementing Microsoft Windows 2000 on Compag solu- 
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Windows 2000 Advantage is a Web-only magazine because 
that lets us bring you, the IT leader, great stories that apply to 
your day-to-day work. We'll keep you up to date with a weekly 
e-mail alert so you don’t miss a thing. 

Windows 2000 Advantage is underwritten by Microsoft 
and Compag. Its charter is to address the issues that most 
concern IT managers charged with keeping their companies on 
top of the latest and best solutions Microsoft and Compaq 
have to offer. Toward that goal, we offer a wide range of stories 
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information you can't find anywhere else. 
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have in implementing - 
Microsoft Windows 2000 < interested 
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71% 8% 
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interested ——»' interested 


Cast your vote now at: 
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IDG's New Year's Prediction: 


Researcher’s sixth year-end forecast sees 
continued optimism despite stock slump 


BY MATHEW SCHWARTZ 
Application service providers 
(ASP) will die. Internet stocks 
won't stage a comeback. And 
the hype about mobile connec 
tivity will reach a hysterical 
pitch 

hose are just three of the 10 
predictions that Framingham, 


Mass.-based research firm ID¢ 


is making for the IT and 
e-business markets in 2001. For 
the sixth year in a row, the re 
search firm polled its 700 ana 
lysts to forecast pending suc 
cesses and failures in the com- 
ing year. 

Last year at this time, ID¢ 
predicted a stock market cor- 
rection in 2000. “We got the 


NEWS 


big one right,” said IDC Senior 
Vice John 
The firm also correctly fore 


President Gantz 
cast the death of dot-com pure 
plays and consolidation within 
the Internet segment 
But there were a few duds, 
such as predictions of virtual 


malls rising as magnets for 


commerce and an explosion of 


free Internet access. 
For 2001, the mood is upbeat. 
“We expect 
vestment by 


e-business in 
corporations to 


grow handsomely despite all 


ClO Survey: 2001 Corporate IT Spending 
To Rise More Moderately Than in 2000 


Efficiency gains, 
Y2k’s end prompt 
ease in expenditures 


BY LUCAS MEARIAN 
The results of a survey of 150 
ClOs by Morgan Stanley Dean 
Witter & Co. show that corpo 
rate IT budgets are expected to 
increase at a more modest rate 
in 200] than they did in 2000. 

CIOs surveyed said their 
companies plan to increase IT 
spending by an average of just 
8% in 2001. That 


average 


compares 
with an budget in 
crease of 12% in 2000, New 
York-based Morgan Stanley 
And 16‘ 
dents said their IT investments 
will actually 
2000 to 2001 


added ) of the respon 


decrease from 
The survey re 
sults were released Dec. 20. 

results came as no 
surprise to Ed Tobin, CIO at 
Colgate-Palmolive Co. in New 


Those 


York, who said he’s cutting his 
technology budget this year, 
mainly as a result of the effi 
ciency of recently installed en- 
application 
tion systems 


terprise integra- 

“We've got a strategy cover- 
ing several years where we've 
implementing several 
new systems, such as SAP, all 


been 


around the world and consoli- 
dating by 
our legacy systems,” he said. 
Jack Cooper, CIO at Bristol- 
Myers Squibb Co. in New York, 
said his IT spending will re- 


decommissioning 


because his 
Y2k-com- 
pliant software in 1999, 


ore | 
main level only 


company installed 


AG's 
planning software and Ariba 


R/3 enterprise resource 


e-commerce applications. 

“That saved us a lot of mon 
ey,” said Cooper 

Cooper said technology ini- 
tiatives in 2001 will focus on 
productivity issues, including 
supply-chain management and 
business-to-business e-com 
merce. He added that his shop 
is also planning to equip the 
Bristol-Myers sales and mar 
keting force with more laptops 
and wireless communications 
devices and to implement 
video streaming. 

“In research and develop- 
ment, we're looking for new 
and 
effective in treating 


compounds molecules 


that are 


new diseases,” he said. “A lot of 


those activities are becoming 
more automated. Scalability 
requires us to look for auto 


mated solutions.” 

Charles Phillips Jr., a tech- 
nology analyst at Morgan Stan- 
ley, said he agreed that the Y2k 
bubble contributed to spend- 





Losing Steam 


AVERAGE 
IT BUDGET 
INCREASE IN 
2001: 


8% 


AVERAGE 
IT BUDGET 
INCREASE IN 
2000: 


12% 


ing on technology being front 
end-loaded in 2000 
In addition IT 


soared in the frenzy of e-com 


spending 


merce activity that took place 
before concerns about the via 
bility of many dot-com ven 
tures dampened the enthusi 


asm for them, he said. 


Wary of Overspending 

Economic concerns have left 
many corporate leaders wary 
of overspending on IT, Phillips 
added. In fact, 12% of the CIOs 
who responded to the survey 
said they recently downsized 
their IT budgets because of the 
And 14% 
said they plan to keep a close 


slowing economy 
eye on the economy and spend 
money more gradually in the 
first half of next year. 

Tom Millikin, a spokesman 
for Procter & Gamble Co. in 
Cincinnati, said the company’s 
IT budget has been growing 
moderately but is expected to 
change dramatically in 2001. 
Expenditures for 
ture, for example, will level off 
or decline, while spending on 
Web-based 
increase 

“Also, 
have an insatiable appetite for 
bandwidth, and we're no dif. 
ferent,” he added. “We'll con- 
tinue to invest in bandwidth 
around the world.” 

The Morgan Stanley results 
are in line with a recent Com- 
puterworld survey of 100 IT 
managers at organizations that 
have at least 400 employees. B 


infrastruc- 


applications will 


most organizations 


Kiss Those ASPs Goodbye 


the noise about the crash and 


impending recession,” said 
Gantz. Despite dot-com stock 
prices, many big corporations 
on the Internet are profitable 


and will continue to invest. 
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Gantz said it’s important to 
monitor the global economy. 

If it slows, “there will be a 
in capital 
ment, and IT investment will 
be included in that,” he said. 

And though IDC’s regional 
analysts aren’t reporting slow- 


slowdown invest- 


downs, “we're not really econ- 
omists,” he said. D 





IDC’s Top 10 Predictions for 2001 


1. Internet stocks won’t 
stage a comeback. 
WHY? After gauging 

the mood of investors, 
financiers and entrepre- 
neurs, IDC says that, like 
their PC stock brethren 
after the 1983 crash, Inter- 
net stocks will take years 
to rebound. 

2. The Internet stock 
crash won't affect in- 
vestment in e-business. 
WHY? Not all e-business 
is related to volatile sec- 
tors, and the 7 million 
brick-and-mortar business- 
es building up an online 
presence far outnumber 
the fewer than 5,000 ven- 
ture-backed U.S. start-ups. 
Furthermore, 50% of U.S. 
commerce sites are now 
profitable. 

3. B2E (business-to- 
employee) will become 
a hot market sector. 
WHY? With double the 
number of employees able 
to access Web-based in- 
tranet systems from 2000 
to 2001, companies will 
realize the cost savings and 
spend more to keep in- 
tranets up and running. 

4. Hype around mobile 
commerce and Internet 
connectivity will reach 
hysterical levels. 
WHY? By 2003, more 
than 1 billion phones on the 
planet will be capable of 
Internet access. But con- 
sumers won't necessarily 
use them, even as vendors 


WHY? ASP vendors will 
attempt to distance them- 
selves from the ASP taint 
of the stock market crash. 
Furthermore, ASPs will 
find that they have to offer 
such things as integration 
and customer support, 
security and training 


6. A massive consoli- 
dation of e-market- 
places is on the way. 


WHY? There are too many 
marketplaces for them all to 
survive. And not even big 
ventures like the auto indus- 
try’s Covisint or the travel 
industry’s Orbitz are safe, ac- 
cording to IDC 


7. Small business will 
emerge as a hot market 
sector. 


WHY? Market saturation 
will force vendors to court 
small businesses, which 
account for 40% of the 
off-line economy but only 
about 20% of the Internet 
economy. 


8. Linux deployments will 
remain a wild card. 
WHY? Simply because IDC 
can’t track Linux deploy- 
ment through licenses — 
there often aren’t any. So 
while IDC forecasts a growth 
in Linux server deployments 
of 35% to 45% from 2000 to 
2001, that figure could go 
higher or lower based on 
competition from Microsoft 
and Novell, operating system 
improvements and Linux 
vendor profitabili 


9. “Web talk” services 
will be all the rage in the 
telecommunications 
industry. 

WHY? Web talk (voice over 
IP) is cheap, so companies 
that give it away can make 
premiums on such things as 
broadband. IDC says the 
number of Web-based tele- 
phony users will grow from 
40 million this year to 400 
million in 2004. 


red-hot buzzword but will 
get a cool reception in 
corporations. 

WHY? Though Napster Inc. 
had more than 35 million 
members in 2000, and peer- 
to-peer (P2P) hype is ram- 
pant, “what’s not there are 
signs that IT professionals 
will abide by such an anar- 
chic solution,” says IDC 
Senior Vice President John 
Gantz. 
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Holiday Shoppers Leave 
CRM Data in Their Wa 


Saks one of many firms beefing up storage 
for improved customer service, contacts 


BY MICHAEL MEEHAN 
HRISTMAS may be 
over, but retailers 
busy 


have been 


making their lists 

this holiday sea 

son will 
work of checking them twice 

Bill Franks, senior vice presi- 


and now begin the 


dent and associate CIO at New 
York-based Saks Inc., 


2.6TB of additional storage last 


bought 


year to help capture as much 
information as possible about 
the company’s customers. 

“As we get more sophisticat- 
ed and as the market gets more 
complex, you need to know 
where you have room to 
move,” Franks said. 

He said Saks originally had a 
“satisfactory” 1.9TB of storage, 
“but we weren't where I'd like 
to be.” 

Once shopping subsides af- 
ter the holidays, Franks and his 
team will begin to mine the 


Continued from page 1 


Online Retailers 


aren't taking place in a vacu- 
um. Ritter and other Yankee 
Group analysts said they’re 
keeping their eyes on a grow- 
ing list of dot-coms that could 
begin to show signs of melt- 
down as early as this month. 

“In the end, people are real- 
izing that e-commerce is fun- 
damentally retailing,” said Rob- 
ert Drescher, CEO of Optivo 
Corp., a Palo Alto, Calif.-based 
e-commerce consulting firm. 
“Cutting costs and streamlining 
only gets you so far. Effective 
pricing is also key.” 

EToys spent more than $94 
to acquire each customer in 
2000, and many other pure- 
play online retailers are spend- 
ing at a similar pace, said Rit- 
ter. E-retailers with a better 
chance of tend to 
spend about $10 to acquire a 
new customer, said Ritter. 

Rebecca Nidositko, an ana- 


success 


data, identifying customer buy- 
ing patterns and store trends. 

“We really believe knowing 
more than your competition is 
going to be a strategic advan 
tage as we move forward,” 
Franks said. 

William Hurley, a program 
manager at Boston consulting 
firm The Yankee Group, said 
brick-and-mortar retailers have 
begun to learn about the im- 
portance of data from their on- 
line brethren. 

“The 
showed you can 
track and 
interest and have all 
this rich data at your 
disposal,” Hurley said. 


dot-coms 


behavior 


“That it’s moving to 
the brick-and-mor- 
tar world now is no 
surprise.” 

He said that Saks’ 
increased storage 


‘reflects the immen- 


lyst at The Yankee Group, said 
the approach used by compa 
nies that have failed or are in 
jeopardy of failing reflects a 
fundamental with 
their “The 
brand-first model 
doesn’t work,” said Nidositko. 
“This is in effect putting the 
before the 
tomer 


problem 
business models. 


business 


cart horse.” Cus- 


acquisition costs at 
these firms, she added, are typ- 
ically “way out of line with the 
growth of the business.” 


Paying Customers? 

The failure of Pets.com in 
early November is a prime ex- 
ample, said Ritter. Although 
the Internet pet-supply store 
had been ranked near the top 
of all online retailers in terms 
of customer conversion rates, 
the company shackled 
with gross margins of negative 
27%, said Ritter. “They were 
charging customers less for 
the shipping of products than 
they actually had to pay to 
get the products into the hands 
of the customers,” he said. 


SAKS’ FRANKS: 
Customer data “is 
our crystal ball.” 


itself 


they can collect 
iilers will likely see 


their 


and that 
exponential growth in 


storage needs eacn year. 


Some e-tailers are finding 
100% growth quarterly, which 
gives you an idea of how much 
data we're talking about here,” 
Hurley said 


Storage Boom 
John Madden, 


lyst at Summit 


a storage ana 
Strategies Inc. 
said many retail IT 


managers are seeking beefed- 


in Boston, 


up storage to merge the infor 


mation of their online and 

brick-and-mortar businesses. 
re still trying to figure 
yuut how to connect 
that synergy,” he said. 

Madden 


aiso sees storage as a 


said he 


ing pitch for IT 
managers. 

“The possibility of 
greater customer re 
tention is an easier 
sell on ROI than new 
switches for the net- 
work,” he said. “You 


can show where it 


Success comes from more 


a lot of Web traffic and 


conversion 


than 


rates, said Ritter. 


“It's really a juggling act,” he 
said of what he calls the “seven 
key factors for success in on- 
line retailing” (see chart). 
Although no single factor is 
more important than the oth- 
ers, if one is missing from a 





Super Seven 


Seven key factors for success 
in online retailing: 


1. Sufficient margins 
2. Tangible value proposition 


3. Cost-effective customer 
acquisition 


4. Web experience 


5. Significant traffic and 
high conversion rates 


6. Efficient and effective 
fulfillment 


7. impeccable customer 
support 


will have a definite impact 
the bottom line.” 

Hurley said greater chunks 
of stored information and bet 
ter data-mining software have 
‘a chicken-and-egg effect,” al 
ways driving companies to get 
more of both. 

Bob Sampson, vice president 
of sales and strategy for stor 


at IBM, said cus 
relationship 


age systems 
tomer manage 
ment and enterprise resource 
planning software had proved 
to be a particular boon to stor 
age vendors seeking clients in 
the retail market. 
We've identified 


our second-largest area 


1 
retall as 


portunity, behind banking and 
finance,” Sampson said 
For Franks, the ex 


means more than increased 
storage; he is eyeing i 
completely Web-en 
age-area network. 

“We're looking 
data 


to keep our 


stocked, to run 


promotions 
and to forecast for ne» 
high season,” he said. “This is 


our crystal ball.” D 


firm’s business plan, it could 
easily “lead to their demise, 
he said. 

both online and 
fared 


On average, 
off-line retailers worse 
this holiday season than m 
experts predicted, said Barrett 
LaMothe Ladd, an analyst at 
Gomez Advisors _ Inc in 
Waltham, Mass. 

Dec. 17, 
sales were running 8.2 


Through holiday 


lower 
than for the same period in 
1999, according to the Interna- 
tional Council of Shopping 
Centers in New York. 

Early results from this holi- 
day season have also shown 
that multichannel firms have a 
leg up on online-only retailers 
“The clicks-and-mortars have 
a cost and convenience advan- 
tage over the pure plays and 
are able to more effectively 
manage the dry capital mar- 
kets and demanding 
sumers,” she said. 

“Once our customers knew 


con- 


we were online, they came, 
and they came in droves,” said 
Cynthia Lin, a spokeswoman 





IBM Takes 
SANs to Japan 


competitors like 


will generate s 


reases of less 


holiday period, 
make it one of th 
sons in the past 

Nordst1 

sorted 

d online 

$594.6 million 

, an increase of 
pared with the same perio 
1999. Internet-based sale 
up 400% for the month cx 
pared with 1999, said spokes 
woman Shasha Richardson 

When asked how Nordstrom 
managed to get it ri 
time, Rict 
while the 
might be new, the 
retailing isn’t. “It’s still retai 
just in another environment,” 
she said. D 


irdson 
Internet 
business of 


] 
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NEW 


E Toys Short On Cash, 


May L 


Holiday season brings bad tidings; 
poor sales lead to cut in workforce 


BY TODD R. WEISS 
HE HOLIDAY sea- 
son isn’t bringing 
much joy to eToys 
Inc. Instead, the fi 
nancially troubled 

online toy retailer is getting 

the business equivalent of a big 
lump of coal: lower-than-ex- 
pected sales that will likely 
force it to lay off workers and 
could cause the company to 
run out of money by March. 
Los Angeles-based eToys 
has warned that financial re 
sults in its third fiscal quarter, 
which ended Dec. 3], are ex- 
pected to be significantly be 
low plan, with sales estimated 
to be only about half of what 
company officials previously 


predicted. Revenue for the 


Ho, Ho. . . Whoa 


Online retailer eToys recently 
warned that its third-quarter 
earnings won't match its ear- 
lier estimates by a wide mar- 
gin, leaving the company 
mulling several options: 





® Layoffs and other reduc- 
tions, expected this month 


@ A merger or sale to another 
company 


® Anew round of financing 


Multilingual 
Registrations Hit 700,000 


But VeriSign Global Registry 


BY TODD R. WEISS 
The company that maintains 
the master database of Inter- 
net domain names said last 
month that more than 700,000 
multilingual Web 
have already been registered 
since it began testing the via- 
bility of using non-English 
characters in Web site ad- 
dresses in November. 


addresses 


quarter is now expected to 
come in at $120 million to $130 
million, compared with earlier 
expectations that it could 
reach the $240 million mark. 
EToys projected that it only 
has enough cash on hand to 
meet its needs through the end 
of March, three months earlier 
than a previous estimate. The 
company said it needs a “sub 
stantial cash infusion” in order 


to continue operating and 
added that it can’t even offer 
assurance that it will be able to 
hold out until March without 
new funding or a possible sale. 
the 


In response to cash 


crunch, eToys said, a work- 
force cut and other reductions 
in operating costs are due to be 
announced this month. 


Facing Competition 

EToys beefed up its Web site, 
database call 
and product distribution capa 
bilities to 


server, centers 


prepare for this 


year’s holiday shopping sea 


ook for Buyer 


son. But Kevin Silverman, an 
analyst at ABN Amro Inc. in 
New York, said sales figures 
through mid-December just 
weren't good enough for the 
company. 

“They had to start coming to 
grips [with the fact] that the 
sales weren't going to material- 
ize,” Silverman said. “The sur- 
prising thing was how few ad- 
ditional sales dollars eToys was 
able to generate, when the over- 
all channel is very successful.” 

One big problem for eToys, 
Silverman said, is that well- 
known retailers such as Toys R 


Struggling Priceline Gives Up Down Under 


Myprice next target 
in series of cutbacks 


BY MICHAEL MEEHAN 
Struggling online discounter 
Priceline.com Inc. took anoth 
er hit in December, announc- 
ing that a company it set up 
last year is dropping its plans 
to launch a name-your-own- 
price Web site in Australia and 
New Zealand 

Norwalk, Conn.-based Price- 
line.com, along with several 
other formed the 
Myprice Pty. venture in Febru- 
ary, and the Sydney, Australia- 
based affiliate began 
telephone minutes on a name- 


investors, 


selling 


Domain Name 


Services (GRS), the unit of 
VeriSign Inc. in Mountain 
View, Calif., that manages the 
back-end piece of the domain 
name process, 
added that it’s still talking with 
the Internet Engineering Task 
Force (IETF) and other stan- 
dards bodies about the best ap- 
proach for developing a global 


registration 


your-own-price basis in Sep- 
Plans called for My 
price to start offering discount 


tember. 


ed travel services this month. 

But which 
been reeling financially in re- 
cent months, said that it’s scut- 


Priceline, has 


tling the travel services launch 
and that it will fold the Aus 
tralian site altogether. Refunds 
will be given to any customers 
who have unused phone min- 
utes, the company said, adding 
that it expects to take a charge 
related to the Myprice shut- 
down during this quarter 

The move — the latest in a 
series of cutbacks at Priceline 
— came just two weeks after 
the company disclosed that it 
was postponing the addition of 


standard for registering multi- 
lingual domain names. 
VeriSign GRS reiterated that 
it plans to comply with a stan- 
dards process being carried out 
by the IETF, and it said multi- 
lingual domain names regis- 
tered as part of its test-bed pro- 
gram should remain functional 
after the testing is completed. 
However, the firm cautioned 
that the “external representa- 
tion” of multilingual Web ad- 
dresses could change, depend- 
ing on what the IETF decides. 
Proponents of multilingual 
domain names said they hope 
the names will help open up 


several new 
price services and dropping 
plans to enter the Japanese 
market through another joint 
venture. As part of that an- 
nouncement, Priceline 
said it will lay off 11% of its em- 


name-your-own- 


also 
ployees — an action that fol- 
lows a previous round of lay 
offs announced in November. 


Ongoing Plans 

In October, Priceline 
tracted with Atlanta-based 
Equant Inc. to help build Web 


con- 


sites in Europe in addition to 
the ones planned for Australia 
and Asia. Priceline spokesman 
Brian Ek said the Australian 
closing would have no effect 
on the company’s plans to 


the Internet to 
around the world. But critics 
like the Internet Society — a 
nonprofit group in Reston, Va., 
that acts as the “organization 
home” for the IETF and the In- 
ternet Architecture Board — 
have said that the commercial 
testing by VeriSign GRS is pre- 
mature without an 
upon standard. 

Mark Fernandes, an analyst 
at Merrill Lynch & Co. in New 
York, said multilingual domain 
name registrations could even- 
tually reach a level of 1 million 
per quarter. VeriSign GRS had 
predicted about 300,000. DB 


more users 


agreed- 
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Us Inc., Wal-Mart Stores Inc. 
and Target Inc. have launched 
improved Web sites that offer 
toys. For example, Woodcliff 
Lake, N.J.-based Toysrus.com 
Inc., the online unit of Toys R 
Us, teamed up this past sum- 
mer with Seattle-based Ama- 
zon.com Inc. to develop a co- 
branded Web that 
toys online. 

Barrett Ladd, an analyst at 
Gomez Advisors Inc. in Wai- 


site sells 


tham, Mass., said eToys is suf- 
fering from the same ills that 
have been afflicting other on- 
line retailers that lack an estab- 
lished brick-and-mortar pres 
ence in cutthroat niches such 
as toys and pet supplies. 

“The pure-plays are incredi- 
bly challenged to put together 
a viable business strategy in 
today’s economy, with the cap- 
ital markets nearly completely 
dried up,” Ladd said. DB 


launch Web sites in Europe 
and southeast Asia. 

Ek added that Priceline has 
already gone through the ini- 
tial launch of its London-based 
site, which offers travel prod- 
ucts. He said no time line has 
been established for the other 
international sites. 

Krista Pappas, an analyst at 
Waltham, Mass.-based Gomez 
Advisors Inc., said the decision 
to drop the Australian venture 
made sense in the wake of the 
business setbacks that Price- 
line has suffered during the 
past six months. 

“Right now, it’s important 
for [Priceline executives] to get 
their own backyard in order 
before they delve into new 
territory,” Pappas said. “They 
need to salvage what 
turned into a fiasco at 
point.” D 


has 
this 


| 
A Wider Net 


VeriSign GRS has been busy 
with its multilingual Internet 


domain name test bed: 


mw Web domain addresses are available in 


| Chinese, Japanese and Korean lan 


guage character sets under .com, .net and 
org top-level domains 


| m About 275,000 Chinese domain names 


are registered thus far, as well as 250,000 


| Korean and 200,000 Japanese Web 


S 
S. 


| m Registrations in other languages, includ 


ing Spanish, Portuguese and Arabic 


| will be added later 
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NEWS 


Microsoft CEO Outlines Priorities, Details Plan to Cut Costs 


Ballmer seeks reduced resource expenses 


BY CAROL SLIWA 

In the wake of slumping rev- 
enue Microsoft 
Corp. CEO Steve Ballmer last 


forecasts, 


month issued a memo to em- 
ployees outlining the compa- 
nv’s business priorities and ef- 
forts “to reduce planned ex- 
penditures very significantly, 
both in the short term and the 
longer term.” 

Ballmer the 
the same day Microsoft warned 
the investment community 
that its quarterly financial re- 
sults would likely be lower 
than expected. But despite the 
timing, a Microsoft 
woman said the 
“not horribly unusual.” 


issued memo 


spokes- 
memo was 
“Steve sends e-mails out to 


the employees of Microsoft 


reasonably routinely,” compa- 
ny spokeswoman Beth Jordan 
said, adding that the memo was 
intended to serve as a wrap-up 
for last year and a prospectus 


for the coming year in terms of 


priorities and strategy. 

“A memo like this is never 
countered Rob En- 
derle, an analyst at Cambridge, 
Mass.-based Giga Information 
Group Inc. “It is often common 
for a [chief financial officer] to 
belt-tightening memos 
when a company is forecasting 


routine,” 


issue 
relatively flat revenue going 
However, for the 
president to initiate such a 
memo raises the impact and 
the amount of concern, in the- 
ory, that the management team 


—_— 4 
forwaid. 


is experiencing.” 


Task Force Focusing on 
IM Interoperability Protocol 


AOL competitors 
push for standards 


BY JENNIFER DISABATINO 
Despite having heard propos- 
als for three instant messaging 
(IM) standards, the Internet 
Engineering Task Force (IETF) 
appears likely to move toward 
a way to make different IM sys- 
tems work together rather than 
select one standard for all IM 
services to use. 

At its meeting in San Diego 
last month, the working group 
considered proposals _ that 
would make IM programs use 
the same protocol to provide 
so-called presence informa- 
tion, which enables one user to 
know if another is online. The 
protocols would allow 
users to chat among different 
messaging systems, including 
America Online Inc.’s AOL In- 
stant Messenger (AIM) and 
Microsoft Corp.'s MSN mes- 
saging service. 

The IETF is an international 
organization that oversees In- 
ternet technical standards. The 
organization has pared down a 


also 


list of 10 proposed protocols to 
three (see chart). IETF officials 
have said all three of those pro- 
tocols appear to interoperate 
within AOL's framework. 

AOL has by far the largest 
number of IM users in the mar- 
ket. Dulles, Va.-based AOL's 
IM and ICQ control 90% of the 
IM market, according to an es- 
timate by iCast Corp., a now- 
defunct AOL rival. 

Competing services have 
complained that AOL blocks 
their customers from commu- 
nicating with AIM users. AOL 
says it won't open its IM service 
until other Internet services 
use secure protocols, which is 
why AOL's competitors have 
asked that standards be adopted. 

The IETF appears most like- 
ly to accept an interoperability 
protocol tentatively called the 
Common Profile for Presence 
and Instant Messaging (CPIM), 
which allows users to find and 
chat with users on different 
systems. 

The working group will ac- 
cept comments on the CPIM 
proposal until Jan. 15, said 
Athanassios Diacakis, chief 
technology officer at Network 


Jordan said Ballmer didn't 
launch “huge initiative” 
within the company to reduce 
Ballmer did note in 
the memo that he asked his di- 


any 
costs. But 


rect reports “to sig- 
nificantly reduce 
our resource invest- 
ments vs. the [Fiscal 
Year 2001] Plan.” 
“Although we are 
a profitable com- 


pany with good 


growth prospects, 
we do not have the 
financial resources, 

the people or the interest in 
doing things that are not con- 
sistent with our priorities,” 
Ballmer wrote. 

His priority “scenarios” in- 
clude Windows PCs and the 
.Net platform software as “the 
foundation going forward.” On 
top of that platform are produc- 


tivity software, enterprise serv- 


Projects Inc. in Pittsburgh and 
a member of one of the IETF’s 
working groups. 

“Once you have interoper- 
ability, the rest is not [re- 
solved ], but [it’s] less of a prob- 
lem,” said Diacakis, who is a 
proponent of the Presence and 
Instant 
(PRIM). 

Diacakis IM 
should have the option of in- 
stalling a simpler 
such as PRIM or the Instant 
Messaging Exchange Protocol. 

Meanwhile, Jon Peterson, a 
senior architect at Level 3 Com- 


Messaging protocol 


services 


said 


protocol 


BALLMER’S priorities 
include PCs and .Net. 


ers and tools, its MSN messag- 


ing service, non-PC devices 

and business applications for 

small and midsize companies 
“It is important that 


pointed out that the 


they 


PC remains the cen- 
ter of the Microsoft 
universe that 
.Net, for example, is 
an important strate 
gy but it is not a re- 
placement strategy 
for PCs,” 
Bittman, an analyst 
at Gartner 
Inc. in Stamford, Conn. 

Ballmer told employees that 
the company would “continue 
being a lot more decisive about 


said Tom 


Group 


not doing certain things.” 
“Decisions to spin off Expe- 
dia, sell our interest in Side- 
walk, create new joint ventures 
for our CarPoint and HomeAd- 
and close 


visor properties, 


munications Inc. in Broomfield, 
Colo., is the IETF’s proponent 
for SIP for Instant Messaging 
and Presence Leveraging Ex- 
tensions, which is based on the 
Session Initiation Protocol 
(SIP). When installed, SIP 
finds the recipient of an e-mail 
and “talks” with its e-mail serv- 
er to identify what kind infor- 
mation will be transferred in 
the message. 

“SIP is swatting a fly with a 
sledgehammer” for current IM 
use, Peterson said, but for fu- 
ture IM use, SIP would be the 
most flexible option. D 





Universal IM 


The following are three protoco’ ; proposed to the IETF: 


PRIM 


The Presence and Instant Messaging protocol is intended only 
for the transfer of text information. It runs over TCP/IP and is 
backed by representatives of Fujitsu Ltd., Network Projects 


Inc., MIT and The Mitre Corp. 


SIMPLE 


SIP for Instant Messaging and Presence Leveraging Extensions uses 
an existing protocol, Session Initiation Protocol, and would 
allow for the transfer of information through different kinds 
of applications, such as an audio file or text. Its backers are 
Microsoft, Dynamicsoft Inc., Level 3 Communications and 


AT&T Corp. 
IMXP 


Instant Messaging Exchange Protocol is a messaging-focused 
approach built on top of the Block Extensible Exchange Proto- 
col, which transfers large blocks of information rather than 


more granular bits. 


Il 


down 1round 


TaxSaver 


our efforts 
and Microsof 
ng Technologies are ex 
of where we 

crisper about our 


Ballmer wrote 


Core Technology Focus 


Ballmer 


also noted a recent 
“not ship the Local 
Web Storage 


fice 10” in order to focus energy 


decision to 
system with Of 
database server code 
Yukon 
the next release of SQL Server. 


on a 


named which will be 


He said that although Yukon is 
“two ye: so off,” it “ 


be key 


storage, database, file sy 


Ss or 
to our next-gene 
e-mail and user interface wo 

He called Yukon “a core .Ne 
ind Windows technology” an 
told employees that level 
asked 
their product 


opment groups will be 
“to organize 
plans to have new versions 
frame 


Net 


available in that time 
based on Yukon and our 
programming model.” 
Although the company will 
work to cut Ballmer 


stressed that hiring new em 


costs, 


ployees and investing in ex 
ing staff remains a “su 
priority.” 

“To be clear, resource reduc- 
tions don’t translate into em- 
ployee layoffs,” Ballmer wrote 
“As we focus on our top priori- 
will reduce unfilled 
head count.” A Microsoft 
spokeswoman confirmed that 


tiles, we 


there are roughly 5,600 un- 
filled positions and employees 
42,000 worldwide. 

Acknowledging the recent 
stock market drop, Ballmer 
told employees that most of 
them will be reviewed within 
the next month for increases in 
base salary or bonus opportu- 
nities. He noted that the firm 
has drifted behind in its goal of 
having base salaries that are 
higher than those of two-thirds 
of the industry. 

In keeping with cost con- 
tainment, Ballmer also said the 
company will “get a better han- 
dle on discretionary expendi- 
tures like travel and entertain- 
ment,” strengthen “the review 
and approval process for large- 
scale expenditures” 
more to “standardize purchas- 
ing and reduce building con- 
struction costs.” 

“To make their numbers, 
they’re going to have to do cost 
containment. It’s happened to 
every other company,” said Pe- 
ter O'Kelly, an analyst at Patri- 
cia Seybold Group in Boston. B 


and do 
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NEWS 
Pentagon to Spend $20M on Health Benefits Portal 


Beneficiaries will be able to access services online 


BY JULEKHA DASH 
The U.S. Department of Defense (DOD) 
plans to spend as much as $20 million 
during the next several years to create a 
Web portal that will enable 8.5 million 
employees, dependents and retirees to 
view their health benefits information 
online. Users will also be able to per 
form tasks such as scheduling appoint 
ments and viewing test results online. 
“They've gone to the next generation 
lof dinietade health] that everyone is 
talking about doing,” said Mark Ander 
Stamford, 
and a for- 


son, a vice president at 
Conn.-based Meta Group Inc. 
mer hospital CIO. 

in Chantilly, Va., 
prototype in the next few 
months and plans to test it at three 
military facilities — including Andrews 
Air Force Base — in Maryland, Virginia 


Integic Corp. will 


develop a 


and North Carolina between February 
and May, said Capt. Brian Kelly, 
tor of e-health at the DOD. 

During the pilot »phase, the DOD will 
a health content provider. At 
lanta-based WebMD Corp. and Blue 
Bell, Pa.-based InteliHealth Inc. were 
two possible vendors 
Kelly, though the 
determine which company will supply 
the content. 


direc- 
select 


mentioned by 


agency has yet to 


Layers of Security 

Kelly said the DOD will continue to 
provide greater layers of security as the 
Pentagon puts more sensitive informa- 
tion on the Web. These security 
with 
and eventually 


mea 
sures will begin password pro- 
Secure 
Sockets Layer encryption and public 
key infrastructure. 


tection include 
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+ Remote Computing & Tape Conversions 
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2) Alicomp 


The Alternative to 
Large IT Vendors 


With the exception of a few leading 
teaching hospitals, the DOD is about 
five years ahead of 90% of health care 
providers, said Anderson. While many 
private and nonprofit health care orga- 
nizations are talking about creating In- 
ternet portals, many lack the money or 
the capabilities to embark on such ini 
tiatives, he said. “The average hospital 
has 20 different [clinical] systems,” he 
said. The military, on the other hand, 
has had its entire database of clinical 
records online for several years, Ander- 
son said. 

Mike research director at 
Gartner Group Inc. in Stamford, Conn., 


Davis, a 


said health care providers that have 
initiated electronic-health portals have 
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Benefits Online 


The Defense Department’s health 
benefits Web portal: 


# Will cost as much as $20 million over the 
next several years. 


= Begins wit 
facilities 


h a prototype phase at three 


& Initially will allow patients to access health 
plan benefits as well as wellness information 


= Will eventually allow patients to view their 
medical records, access test results and get 
prescription refills online. 


“brochureware.” 
most health organiza- 
he said, include inflexible 
legacy systems and networks that don’t 
have enough bandwidth. D 


yet to move beyond 
The obstacles 
tions face, 


FIC Seeks Input on Revisions to 
Credit Card Data Privacy Guidelines 


Rules would restrict data 
sharing with affiliates 


BY MARIA TROMBLY 
The Federal Trade Commission (FTC) 
has issued a request for public com- 
ments about a proposed set of data pri- 
vacy guidelines that would affect com- 
panies looking to share credit records 
and other consumer information with 
affiliated businesses. 

The proposed revisions to the Fair 
Credit Reporting Act (FCRA) include 
requirements as making sure 
individuals are notified about such 
data-sharing and are 
given the ability to opt out of having 
their personal information transferred 


such 


arrangements 


from one company to another. 

James Grady, an analyst at Giga Infor- 
mation Group Inc. in Cambridge, Mass., 
said the FTC is proposing the privacy 
guidelines partly because of the growth 
of affiliate marketing programs that 


CL 
Opting Out 


The FTC 
must: 


said opt-out notices or links 


® Be labeled appropriately and placed on Web page 
that users frequently access, such as those where 
are completed 

5 to encourage users to 


® Include text or visual clues 


ywn the page if that’s necessary in order to view 


| @Be free of other elements, such as graphics or audio 
components, that could distract attention from the text 
| of the notice itself 


| the Office of Thrift Supervision. 
| guidelines also match the privacy pro- 
| visions of the 


link e-commerce Web sites operated by 
different online retailers. 

“Privacy groups and activists have 
sounded the alarm, accusing a lot of 
these companies of forming affiliate 
relationships as a way of getting around 
privacy restrictions,” Grady said. 

The guidelines clarify how the FCRA 


| applies to firms that aren’t traditional 


credit-reporting organizations, such as 
banks and credit card companies. FTC 
spokesman Howard Shapiro said the 
revisions are primarily aimed at retail- 
ers — although he wouldn’t comment 
on whether the commission is targeting 
e-commerce sites. 


| Notifying Web Shoppers 


The five members of the FTC voted 
unanimously to proposed 
guidelines in the Federal Register and 
to open a public comment period that’s 
scheduled to run through the end of 
this month. According to the proposal, 
online shoppers and other Internet 
users must be given the right to opt out 
whenever a company shares transac- 
tional data or other personal informa- 
tion with its affiliates. 

The FTC said its guidelines are simi- 
lar to proposed regulations issued by 
a group of federal banking agencies 
that includes the Federal Reserve Sys- 


post the 


| tem’s board of governors, the Federal 


Deposit Insurance Corp., the Office of 
the Comptroller of the Currency and 
The 


Gramm-Leach-Bliley Act 
that Congress approved in 1999 to 


| deregulate the financial services indus- 
| try, the commission added. D 
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The Cisco Kid Provides 
A Peek Behind the Scenes 


CEO Chambers touts speed, ‘virtual close’ 


OMPUTERWORLD’S 
James Cope re- 
cently spoke with 


John Chambers, the | 
president and CEO | 
of internetworking superstar | 
Cisco Systems Inc. in San Jose, | 
about how his company works, | 
touching on topics as varied as | 


the need for speed, employee 
empowerment and 
Knight. Here are some ex- 
cerpts from that conversation. 


Bobby | 


A: It’s really very simple: The 


faster a business can go to mar- | 
ket with a product or service | 


after recognition of an oppor- 
tunity, the greater its chances 


of gaining meaningful market | 


share and pulling away from 
the pack. We could do 10 acqui- 
sitions a month if we had to. 


Then, of course, we have the | 


virtual close [of our financial 


| books}. 


Q: You frequently point to speed as | 


a key success factor for companies 
competing in an information econ- 
omy. Why is that? 


Former Lucent Exec Named 


| A: You can capture within eight 
exact earnings per | 
expenses, | 


| Q: Exactly what do you mean by 


“virtual close”? 


hours ... 
share, revenues, 


Chairwoman at Avaya 


Spin-off partakes in 


leadership swap | 


BY JAMES COPE 


In a convoluted case of execu- 
tive swapping, Lucent Tech- | 
nologies Inc. spin-off Avaya | 


Inc. has named former Lucent 
Vice President Patricia Russo 
to be its chairwoman — a posi- 
tion last held by Henry 
Schacht, who gave up that job 
in October to become interim 
chairman and CEO at Lucent. 


Russo, 47, was president of | 


what’s now Avaya from 1993 
through 1997, when the Basking 
Ridge, N.J.-based vendor of en- 
terprise networking products 
was still part of Lucent. 

More recently, Russo was 
executive vice president and 
CEO of  Lucent’s 
provider networks group be- 
fore leaving the company last 
August as part of a manage- 
ment realignment that preced- 
ed the later shake-up that re- 
sulted in Schacht taking over 
as CEO. 

Since then, Russo had been 
working as an independent 
consultant to other companies 


service 


| in the telecommunications in- 


dustry. 


ly spun off from Murray Hill, 


| NJ.-based Lucent in the fall, 





Russo will assist CEO Donald | 
| pany 


Peterson in running the com- 
pany. Peterson, who’s also 
Avaya’s president, was named 
to the additional position of 
vice chairman. 


Restructuring a Priority 

In an interview, Russo said 
one of the primary challenges 
in her new position 
will be to continue to 
execute a restructur- 
ing of Avaya, which is 
now targeting its net- 
working products at 
communications ser- 
vices providers that 
in turn sell to corpo- 
rate users. Russo 
added that she’ll also 
“focus on executing 
in what we see as 
high-growth areas, 
such as IP telephony.” 

Asked whether the associa- 
tion of Avaya with financially 
strapped Lucent is an advan- 
tage or a hindrance for the new 
company, Russo said Avaya 





RUSSO: Making 
Avaya a separate 
company was the 
right thing to do. 


margins by every single prod- 
uct, by every single function 


| across the company. So you 


know where you are at any 
point in time. What it allows 
you to do then is to 

react — to address is- 

sues when you still 

have time to do it. 


Q: Can you elaborate on 
how the virtual close 
works? Can other com- 
panies do the same 
thing? 

A: Yes, but the leaders 
of the business have 
to believe it’s worth 


| the investment to im- 
plement. And then you go with | 


common data architecture and 


data applications designed to | 
| your corporation as you want 
| to — decisions that used to 
benefits from its Lucent her- | 
| itage but can now function bet- | 


ter as an independent entity. 
“Making it a separate com- 


| pany was the right thing to do,” | 
| said Russo. 


In October, Lucent reported 
lower-than-expected earnings 


| for its fiscal fourth quarter and 
At Avaya, which was official- | 


warned that similar results are 
likely in the three-month peri- 
od that ended Dec. 31. 


At the same time, the com- | 
Richard | 
McGinn and named Schacht to | 
take over while it searched for | 
| your leaders. When the leaders 
Schacht, 66, was CEO of Lu- | 


ousted CEO 


a permanent leader. 


cent from 1995 to 1997 and con- 


tinued as its chairman into ear- | 
| you lead very talented but 
| challenging people? Once you | 


ly 1998. But his current job was 
further complicated in Novem- 
ber, when Lucent 
said it had discov- 
ered a $125 million 
shortfall in the rev- 


enue reported for its | 


fiscal fourth quarter 
— a finding that was 
expected to lead to a 
further reduction in 


riod. 
Peter Bernstein, 
nautics Inc. in Ram- 
sey, NJ., said Russo’s appoint- 
ment as Avaya’s chairwoman 
“should instill some confi- 
dence among the customer 
base and boost employee 
morale” at the spin-off. D 


CHAMBERS: “How 
do you lead very 
talented but chai- 
lenging people?” 


earnings for that pe- | 
| tentially changing the way the 


an analyst at Info- | 


lead up to getting the virtual 
close. You have to tie together 
e-commerce capability 
with customer support, with 
your head count, with your vir- 
tual manufacturing. 
All that together 
adds into the virtual 
close. 

But the real power 
of the virtual close 
that people miss on 
their first cut is this: 
It isn’t just for pre- 
venting surprises for 
the CEO and CFO. 
That’s what gets the 
headlines. The 
power is, once you 
have the data in an appropriate 
format, you empower 
sion-making as far down in 


your 


real 


deci- 


have to come to the CEO or 
CFO. But empowerment only 
works when you have a mis- 
sion and goals — you know 
where you're going. Otherwise, 


| you get chaos. 


Q: You received an MBA from Indi- 


ana University, and when we were | 


chatting informally earlier you 
mentioned its former basketball | 


coach Bobby Knight. What can 
business leaders learn from 
Knight’s demise? 

A: You have to decide what 


Sendmail Goes Mobile 
Sendmail Inc., a provider of the 
commercial version of the Sendmail 
open-source e-mail program, has 
acquired Nascent Technologies Inc. 
in what officials described as a mul- 
timillion-dollar transaction involving 
stock and cash. The deal between 
Emeryville, Calif.-based Sendmail 
and Reston, Va.-based Nascent lets 
Sendmail users access their e-mail 
via the Web or through a wireless 
device by Wireless Application Pro- 
tocol or i-mode, a proprietary proto- 
col from NTT DoCoMo Inc. in Tokyo. 


Sun to Adopt Eazel 
Desktop for Solaris 


Open-source desktop software ven- 
dor Eazel Inc. in Mountain View, 
Calif., has reached a deal with Sun 
Microsystems Inc. to provide its 
Nautilus desktop for Sun’s Solaris 
Unix-based operating system. Under 
the agreement, Sun will distribute 
Nautilus, touted as having an im- 
proved, easier-to-use screen envi- 
ronment, on the upcoming Gnome 
2.0 desktop interface for Solaris. 


Short Takes 


NORTEL NETWORKS CORP. in 
Brampton, Ontario, signed an 








| agreement with SIERRA WIRELESS 


INC. in Richmond, British Columbia, 


| and XIRCOM INC. in Thousand 


kind of culture you want for | 
| vendors claim is the first third- 


get outside the culture, I think | 
you have to step up to the is- | 
sues. The question is, how do | 


let them get outside the box | 
too far, it’s very difficult to | 
bring them back in. That’s one | 
of the important things to learn | 


as a leader. 


about your job? 
ing with the customers and po- 


world works, lives, learns and 
plays. The toughest thing to do 
as a leader is to make the man- 
agement changes that need to 
be made. If you ever have to lay 
off anybody, that’s even harder. 


Ihad to... lay off 5,000 people | 


when I worked at Wang. It 
about killed me. 


Oaks, Calif., to develop what the 


generation wireless modem based 
on the Universal Mobile Telecommu- 
nications Service standard. . . . 
INFOIMAGE in Phoenix added VIGIL 
TECHNOLOGIES INC. in Acton, 
Mass., to its Federated Alliance 
Partner program. . . . EMACHINES 
INC. in Irvine, Calif., said it won't 
meet its estimated fourth-quarter 
earnings and expects to post a loss 


| of 19 to 23 cents per share - much 


| Q: What do you like most and least | 


more than the 4 cents per share 


| loss forecast by analysts. . . . 


| A: What excites me is interfac- | 


MICROSOFT CORP. announced an 
alliance with Japanese computer 


| software company BIG BANG SYS- 
| TEM CORP. to provide large compa- 


| 
| 


nies with mobile software based on 
Microsoft's .Net technologies. . . . 
Shareholders of antivirus and soft- 
ware maker SYMANTEC CORP. in 
Cupertino, Calif., and security soft- 
ware company AXENT TECHNOLO- 
GIES INC. in Rockville, Md., ap- 
proved the companies’ merger. 





THE ANSWER IS EASY. 
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Dell | PowerEdge Servers 


Expandable Growth + Expert 
Performance = No Compromise. 


* Fast: 
Dell” PowerEdge™ servers have up to 8 Intel 
Pentium® Ill Xeon™ 700 MHz processors with 72GB 
internal storage and 32GB memory that can work 
for you. 


* Available: 
Dell PowerEdge servers keep your e-business 
running with Chip Kill memory support; redundant 
hot-pluggable power supplies, hard drives and 
cooling fans; redundant load-balancing NICs and 
remote server management. 


* Reliable: 
Dell PowerEdge servers are available with 99.9% 
uptime guarantee’ and are tested in the factory three 
times before they ship. 


* Scalable: 
Even in multi-platform environments, you can add 
capacity as you need it. 


* Adaptable: 
Pick your operating system and pick your customized 
applications, anything from e-commerce to ERP. 


* Proven expertise: 
All of which is how Island ECN matches over 230 
million shares a day—each within milliseconds by 
using Dell PowerEdge servers featuring Intel 
Pentium Ill Xeon processors 


* Buy it: 
At WWW.DELL.COM 
or call 1-800-508-DELL 


. . 800.508.DELL 
Enterprise servers, made easy with Dell | wwyw petL.com 
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MARYFRAN JOHNSON 


Got Good People? 


OU’VE JUST READ the key question of this bright new 
millennium. The perennial three R’s of IT hiring (re- 
cruiting, retraining and retaining) won’t diminish in im- 
portance at all in 2001. Without the right people to do 
the real work, all the grand project plans in the world are 


just another round of PowerPoint 
slides. The continuing escalation 
of e-business, the compelling need 
for information security and the 
ever-closer relationships with cus- 
tomers, suppliers and partners 
mean companies of all sizes need 
talented technologists to sign on 
— and stay on. 

The good news is that rehiring is 
fast becoming the fourth R, as tradi- 
tional companies’ e-ventures are 
attracting dot-com refugees, lured 
back not just by money but by a host of other 
career advantages. Our Annual Hiring Fore- 
cast (page 36) points out how larger tradition- 
al companies have the benefits of scale, pro- 
vide more IT resources and bigger budgets, 
and still offer technology challenges. Have you 
met any CIOs lately who aren’t making e-busi- 
ness a priority? Me neither. 

A recent survey of 150 top CIOs, released 
by Morgan Stanley, said IT budgets would in- 
crease about 8% this year, primarily in data- 
bases, online marketplace software, e-com- 
merce and networking equipment. That maps 
nicely with where we see the hiring trends. 
Our forecast pegs the top-demand IT jobs 


turning up in systems integration 


and infrastructure work, e-business | 


architecture, customer relationship 
management software and wireless 
application development. 

One downside that hiring man- 
agers will see is an onslaught of ap- 
plicants demanding higher salaries 
than their experience may justify. 
How many of us have heard stories 
about an entry-level Web develop- 
er candidate, just out of college and 
completely sans experience, look- 
| ing for $75,000 a year? That inflation in salary 
| expectations is an unfortunate echo of the 

dot-com boom. But the upside is the increas- 


MARYFRAN JOHNSON is 
editor in chief of Comput- 
erworld. You can contact 

her at maryfran_ johnson® 
computerworld.com. 


ing supply of serious candidates — people 
looking for a lot more than stock options — 
and an expanding universe of outsourcers 

| and service providers willing to take on 
fixed-fee, short-term projects. 

So expect to see plenty of IT résumés, but 
only a few with the well-rounded technical 
talent and business savvy you need. Even 
more important, examine the fit between the 
candidate and your corporate culture. They 

| want the right firm as much as you want the 
| right people. D 
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from users and pragmatic 
| assessments from your in- 
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PIMM FOX 


From Israel, 
A Familiar 
Story About IT 


HERE IS SOMETHING normal go- 
ing on at Hadassah-Hebrew Uni- 
versity Medical Centers, located 
in one of the small valleys of Jerusalem. 
According to Edi Landau, network 
manager for the information systems 


| division of the 1,000-bed nonprofit hospital, doc- 

| tors expect too much from the computer system 
while funding is limited. Meanwhile, doctors 

complain that the hospital lacks the kind of Inter- 

| net connectivity they need for easily sharing 

| graphics with colleagues. 


To make things worse, these realistic assess- 


| ments lead the internal IT 
| teams to be less than en- 


thusiastic in recommend- 
ing wholesale change. Af- 
ter all, they'll have to sup- 


| port any new equipment. 


How do you make a 


| generational leap from 
| one technology network 


to another with limited ere 
funds, legitimate pressure PIMM FOX is Computer- 
world’s West Coast 
bureau chief. Contact 
him at pimm_fox@ 
computerworld.com. 


ternal IT team? 
Compared to many U.S. 


| hospitals of similar size, Hadassah uses an anti- 

| quated IT platform that doesn’t address some 

| physicians’ requirements. Landau says one reason 
| for Hadassah to avoid a change to, say, a Web- 

| based PC environment is the large amount of tech- 
| nical support needed that Hadassah can’t afford. 


Yet Batami Sadan, Hadassah’s director of infor- 


| mation services, has developed a plan she hopes 
will take IT as a tool and refashion it into a strate- 
| gic asset. Sadan demonstrates the kind of busi- 


ness leadership that IT leaders must have in or- 


| der to shift the focus of the corporate IT review. 


Her plan looks at strategic objectives for IT ina 
four-year time frame and lists the plan’s benefits 


| to hospital customers, plus the physicians, nurses 


and staff who interact with the system. 
The report discusses clinical workflow and a 
new information portal and defines IT’s objec- 


| tives for such functions as laboratories, finance, 
| supplies and logistics in the context of budgets 
| with target dates for implementation. Only by 

| giving specific figures and timetables can you 


motivate budget makers to allocate money. 
Sadan is trying to get senior management to 
buy into her plan. She says she knows that with- 
out widespread support, changes can be difficult 
and lengthy to implement. 
And if you need to change your organization's 


| image and get more users involved in IT decision- 
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making, that’s a plus, too. That’s why Sadan says a 
physician with medical informatics expertise, for 
instance, should head the medical computeriza- 
tion unit. 

While Sadan laments what she calls an inade- 
quate budget, she feels that part of her role is to 
alert people to the strategic advantage of IT. 
Without the financial support, Sadan will be un- 
able to provide the service her hospital staff re- 
quires, but at least her plan gives people some- 
thing to rally around and helps frame the debate 
of where to put IT resources. 

That should be your role as well. D 


DAVID MOSCHELLA 


Don’t Look to 
Internet to Solve 
Voting Problems 


S PART OF the aftermath of our 

recent electoral nightmare, nu- 

merous academic and govern- 
mental organizations have already start- 
ed trying to figure out how we can avoid 
another vote-counting disaster. One 
thing is for sure: The Internet isn’t the answer. In- 
deed, computer networks are likely to remain a 
relatively small part of the picture. 

No doubt, you have already heard some people 
suggest otherwise. If Visa, Citicorp and Nasdaq 
can handle millions of error-free transactions per 
day, why shouldn’t our country have a 21st-centu- 
ry computer-based voting svstem capable of simi- 
lar accuracy? And if the Internet can be used to 
file your taxes, pay your bills and manage your 
portfolio, why isn’t it safe enough to register your 
political preferences? 

Similarly, it has often been correctly noted that 
local voting is one of the biggest barriers to voter 

turnout. The only realistic 

time for commuters to 
vote is either before or af- 
ter work. They then typi- 
cally face long lines as 
everyone goes to the polls 
at more or less the same 
time. So it’s only logical 
that if people could vote 
from somewhere near 
their workplace, voter 

| participation would signif- 

icantly increase. 

High-volume transac- 
tion processing and loca- 
tion-independent system 
access are certainly things 
that computer networks tend to be good at. Vot- 
ing systems are indeed very much like financial 
or reservation transaction processing systems. All 
these systems need to authenticate users and then 
reliably and efficiently repeat and record the 
same set of basic transactions. And if this transac- 


DAVID MOSCHELLA is vice 
president of knowledge 
strategy at Means- 
business, a Boston- 
based Internet start-up 

that’s building a database 
of ideas. Contact him at | 
dmoschella@earthlink.net. | 


NEWS 


tion processing is done over a network, it should- 
n’t matter whether one votes in one’s town or 
from across the globe. 

It all sounds so familiar and sensible. But think 
about it. The government would have to build a 
system capable of processing 100 million transac- 
tions in 50 states over a 16-hour period. This sys- 
tem would then, in all likelihood, sit idle for about 
two years, and then need to be fired up again. 
From a cost/benefit perspective, the huge invest- 
ment in databases, servers and software just isn’t 
worth it, even at an individual state level. 

Using the Internet is even more problematic. In 
addition to all of the transaction processing prob- 
lems, the potential for abuse or sabotage is still 
real enough that election overseers are unlikely to 
allow large-scale voting to be done purely over a 
network. A more realistic possibility might be 
some sort of ATM-like system [News Opinion, 
Dec. 18], which could use magnetic stripes or 
smart cards, along with passwords and polling- 


23 


place cameras, to provide the required voter au- 
thentication. But the only way to justify the huge 
costs of such a system would be to use the cards 
and systems for other significant purposes. 

All this suggests that state and federal voting 
will remain an off-line experience at local polling 
places, at least for the foreseeable future. Individ 
ual states will, of course, do lots of experiment- 
ing, but massive statewide systems seem unlikely. 

Indeed, merging Election Day with Veteran’s 
Day and making it a formal Tuesday holiday 
would cost nothing and would probably improve 
the system more than most computer-based ideas 
would. 

So let the election commissions see what new 
technologies can be used to more quickly and ac- 
curately check voter registrations and tabulate 
votes. Surely the punch card has got to go. But 
don’t be surprised if in 2012, you're still visiting 
the same old polling place and voting on a famil- 
iar paper-based ballot. D 





Ignore Stereotypes 
By Hiring Individuals 


READ David Foote’s 

column about the re- 

lationship between 
hiring nannies and hiring 
IT professionals with 
great interest (“Staffing 
Problems? Learn From 


| the Nanny Dilemma,” 


News Opinion, Dec. 11]. I 
was born in India, grew 
up in the U.S. and cur- 
rently work in an IT en- 
vironment with a diverse 
workforce. All of these 
people, regardless of age, 
national origin, visa sta- 
tus, English proficiency, 


| etc., share key qualities 


that make them success- 
ful and valuable to the 


| organization: 


w The desire and ability 


| to learn new technolo- 
gies and adapt to chang- 


ing organizational needs. 


| m The desire and ability 


to work with others in a 
professional manner, 
without biases. 

w A willingness to reach 
out and understand oth- 
er people well enough to 


| communicate effectively 


with them. 


| @ An ability to be orga- 


nized and take respon- 
sibility. 

In terms of suitability 
for IT work, variability 
within a particular group 
is generally greater than 
variability between 





groups. Employers need 
to remember the impor- 
tance of the individual 
when making hiring deci- 
sions, rather than making 
assumptions based on 
group characteristics. 
That’s the hiring philoso- 
phy that really matters, 
whether you are hiring 
somebody to care for 
your children or your IT 
infrastructure. 

Sourav Banerjee 


| Systems validation consultant 
| AstraZeneca Pharmaceuticals 


Wilmington, Del. 


FTER READING the 

“Dabbling at Di- 

versity” article by 
Kathleen Melymuka 
[Business, Dec. 11], I 
found myself rather dis- 
turbed by the comments 
made by Ruben Barrales. 

He reinforces the 

stereotype that African- 
Americans and Latinos 


| aren’t up to par when it 
comes to technical sub- 


out of science and math 
as early as elementary 
school.” 

Barrales does a disser- 
vice to those who re- 
mained interested and 


| excelled in the sciences 
to the point of making IT 


their career. Because of 
wide belief in the validi- 
ty of his statement, these 
individuals find them- 
selves having to prove 
themselves much more 
than others. 


| J. Simon 


IS manager 
New York 
magisnyc@yahoo.com 





Pity Hormel for Spam 


LOVED THE irony that 

shouted at me from 

your Nov. 27 article 
“Online Marketers Stung 


by Spam Label” [News]. 


It seems that some folks 
forget that spam is a 
metaphor that calls up 





HE ROUNDTABLE 

on electronic 

CRM tools was 
fascinating [“Coddling 


| the Customer,” Business, 


Dec. ll]. It amazes me 
that in this day and age 
most companies still 


| struggle to give their 
| best prospects truly tai- 


lored, personal service, 
across the board and not 





Technology Should Ease Serving Customers 


just to the handful of 
huge clients who get 


| dedicated, personal care. 


Technology is supposed 
to make this easy and 
scalable. 

Bill Power 

Director of marketing 
communications 

Droplet Inc. 

New York 
bpower@dropletinc.com 


| an image of being hit in 


the side of the head by a 
slug of flying meat from 
4 square can marketed 
by Hormel Foods — in 
other words, unwanted 
e-mail. The poor online 
marketers. What about 
poor old Hormel? 
Richard Parke 

Consultant 

RFD & Associates Inc 
Austin, Texas 


Dell Should Diversity 


lr WILL BE good for 

Dell to diversify into 

all the areas Don Ten- 
nant outlined, but this 
won't protect Dell from 
the “whimsical financial 
market” [“Dell to Shift 
Away From Desktops as 
Wall Street Punishes PC 
Makers,” Computer- 
world.com, Dec. 11]. Sev- 
eral companies that play 
in ail of these areas have 
been punished lately. 
Greg Martin 
Lynchburg, Va 
Greg.Martin@bigfoot.com 





COMPUTERWORLD welcomes 
comments from its readers 
Letters will be edited for brevity 

| and clarity. They should be ad- 
dressed to Jamie Eckle, letters 
editor, Computerworld, PO Box 
9171, 500 Old Connecticut Path, 
Framingham, Mass. 01701 
Fax: (508) 879-4843. Internet 

| letters@computerworld.com 

| Include an address and phone 
number for immediate verification. 





DAN GILLMOR 


Bush May Walk 
Tightrope on 
‘Top IT Issues 


HEN GEORGE W. BUSH takes 

the oath as the nation’s 43rd 

president on Jan. 20, he’ll 
bathe in applause from some of the tech- 
nology industry’s top bosses. But as he 
tries to be all things to all people, he runs 
some major risks of annoying everyone. 

Let’s look at just two of the major IT- 

related issues — data privacy and Inter- 
net taxation — that Bush and his admin- 
istration will have to tackle sooner or 
later. I’m anticipating later, for reasons 
you'll see. Bush’s positions on both top- 
ics during the campaign were somewhat 
fuzzy. He endorsed a continued morato- 
rium on Internet taxes, but expressed 
some concern about the potential for undermin- 
ing state and local tax 
bases. He noted Ameri- 
cans’ increasing worries 
about privacy but didn’t 
propose any concrete ac- 
tions. Neither matter is go- 
ing to be easy to solve be- 
cause different parts of 
Bush’s constituency are in 
vehement opposition on 
each point. 

The issue of Internet 
taxation — whether to 
levy sales taxes on goods 
pits the tech 


DAN GILLMOR is technol- | 
ogy columnist at the San 
Jose Mercury News. 
Contact him at 
dgilimor@sjmercury.com. | 
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sold online 
industry’s barons, most of whom adamantly op- 
pose Net taxes, against an old-fashioned Republi- 
can line of support: Main Street businesses. The 
tech bosses don’t want to do anything to make 
their own lives more difficult, but Main Street 
stores are losing sales to Internet companies. 

This has led at least one Republican governor, 
Mike Leavitt of Utah, to insist that e-commerce 
should be just as taxable as nonvirtual commerce. 
There’s bipartisan recognition on Capitol Hill and 
in the states that the status quo will be untenable 
in the long run. 


Lip Service Not Enough 


While the economy was roaring along the past 
few years, the debate didn’t catch fire because 
state and local tax collections were holding up 
well. A good economy disguised the erosion 
caused by Internet sales. 

But if we’re heading into a recession, as some 
believe, the unfair advantage of the Internet busi- 
nesses will hit home in a more direct way, as gov- 


ernments that rely on sales taxes feel the revenue 
pinch. As a governor, Bush knew about the prob- 
lem. As president, he’ll have to deal with it more 
directly, because this is an issue that demands a 
federal response. 

The privacy question brings just as many con- 
flicts. During the campaign, Bush sensed the 


growing public angst and talked about how he 
understands the need for privacy of financial, 


| medical and other records. Many people took that 


to mean he favors tough legislation, though I’ve 
seen no sign that he went so far as to actually 
endorse anything of the kind. If he does, he’ll 
run up against corporate America, including the 
technology industry. 

With few exceptions, companies insist that 
self-regulation is the answer. Self-regulation, of 
course, is really no regulation at all. Companies 
don’t want restrictions on their rights to traffic 
valuable information about their customers. 
Some kind of federal intervention seems critical, 
but whether Bush will have the stomach to say no 
to some of his primary backers remains to be 
seen. 

To be fair, the Clinton administration shirked 
its duty on these difficult issues, dodging both. 
But they'll be coming to a head soon enough, and 
Bush will have to deal with them. Vague smiles 
and promises of bipartisanship won’t cut it. D 


MICHAEL GARTENBERG 


How to Apply 
Skepticism for 
IT Predictions 


HIS IS MY FAVORITE time of year. 


It’s not the holidays or the good 
cheer that come with the season. 


| For me, it’s the time of year when every 
| journalist, pundit, analyst and anyone 

| else with an opinion publishes a list of 
| predictions for the new year. 


We’ve heard before of the Year of the 
LAN, the Year of the Network Computer 


; and the Year of the Internet. While all 


these events actually occurred at some 


| points, they never occurred in the years 
| for which they were forecast. This year, 


we'll hear about the Year of Wireless or 
| perhaps another prediction of the PC’s 
| demise. Again, the pundits will mostly 
| be wrong. 
So, rather than yield to the temptation of creat- 
ing my own list, I’m going to explain why folks 
| are consistently wrong and how you can test the 
validity of experts’ predictions. 
Imagine that you’re standing in Kitty Hawk, 
N.C., in 1903. After many attempts, Orville and 
| Wilbur Wright have finally succeeded in making 
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the first manned flight. While their time aloft is 
short, their actions will change the course of 
history. It will change the way business is con- 
ducted. It will change human behavior into the 
21st century. 

Now, imagine that at the end of that historic 
flight, you were to go to Orville and Wilbur, clear- 


| ly the aviation experts of their day, and ask their 


opinion of frequent-flier 
programs. 

The problem with 
predicting the future is the 
nature of the method 
used. Most analysts and 
pundits who are good at 
what they do have excel- 
lent pattern-recognition 
skills. 

The ability to observe 
early on the repetition of 
established rules of behav- 
ior — or what has already 

occurred — gives a good 
tal firm. Contact himat | analyst an edge. 
gartenb dsonptr.com | For example, want to 


MICHAEL GARTENBERG, 
former vice president and | 
research area director at | 

Gartner Group Inc., is a 
partner at Hudson Ven- 
ture Partners LP, a New 
York-based venture capi- 





impress your friends and 


| family with the date the next upgrade of Win- 


dows will ship? That’s easy. Take the beta release 


| date and add at least one year. It’s a pattern that 


has held true for every release, including Win- 
dows 2000. 


| Don't Predict the Future - Invent It 


But most technologies don’t fit established 
patterns, and most pundits refuse to acknowledge 


| that they don’t have a crystal ball. So here are 


some guidelines to help you test the many predic- 
tions forecast: 
1. Any vendor can ship 50,000 of anything. Any- 


| time a new product is introduced, you can always 
| find someone willing to buy it, as well as an ana- 


lyst who will project a trillion-dollar market for it. 
A good rule of thumb is to ask: “Would I spend 
my own money on this?” If the answer is no, it’s 


likely no one else would either. 


2. What’s the “visible differentiation”? The next 


time you hear about a product that’s touted as a 


“Windows killer,” take a good look. Can you see a 


| visible — and positive — differentiation and tan- 
| gible benefit for end users, OEMs and indepen- 


dent software? If you can’t, buy Microsoft stock. 


| 3. Best of breed doesn’t ensure victory in the 
| marketplace. In fact, if history is a guide, it almost 


always guarantees the opposite. Take VHS and 
Beta, Mac OS and Windows. Rooting for best of 
breed is a great ideal, but it’s not the sole crite- 
rion for success. 

Technology doesn’t move at clear right angles. 
Rather, it twists and turns at dizzying speeds and 
creates new market opportunities and venues for 
success as quickly as it closes others. 

So, how do you predict the future? How do you 
seize the opportunity to create the Next Big 
Thing and retire before 30? My favorite visionary, 
Alan Kay, said it best: “The best way to predict 
the future is to invent it.” D 
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DIGGING UP DIRT 
ON DOT-COMS 


In today’s hot labor mar- 
ket, there are few, if any, 
topics that are off-limits 
for job candidates to 
bring up while inter- 
viewing at dot-coms. In 
fact, says author Daniel 
S. Rippy, they should be 
as probing as possible 
before signing on toa 
technology start-up. » 28 


MESSY 
EXCHANGE 


Commerce One and Or- 
acle have finally come to 
terms concerning their 
roles in the Big Three 
automakers’ Covisint 
exchange. But the ardu- 
ous process of reaching 
that agreement illus- 
trates just how complex 
and messy such massive 
operations can become 
and how easily market- 
places can fail.» 30 


FACE THE MUSIC 


It looks as though 
MP3.com’s legal woes 
will press on into the 
new year. Late last 
month, EMusic.com, an 
online music provider, 
filed suit against MP3, 
alleging that the compa- 
ny is infringing on its 
copyrights. » 31 


ARTS AND 
SCIENCES 


Barbara Null has found a 
way to strike the perfect 
balance in her job at 
Hallmark. As a manager 
of the card company’s 
desktop publishing sys- 
tems, Null gets to put 
her technology exper- 
tise to work, but she also 
gets to flex her creative 
muscles by working 











with artists, designers 
and editors. » 35 


THE RIGHT PRICE 


Consultants who can 
master Web-enabled 
customer relationship 
management projects 
and supply-chain man- 
agement systems are in 
high demand this year. 
And those with the right 
experience are jacking 
up their rates, while 
those without it are cut- 
ting deals for training 
and experience in those 
areas. » 38 


BIG MAN 
ON CAMPUS 


In the early 1990s, Valley 
City State University, a 
small North Dakota col- 
lege, set out to differen- 
tiate itself from its larger 
competitors. It decided 
to become a pioneer in 
the instructional use of 
technology. Today, it’s 
one of the most wired 
colleges in the U.S., and 
its graduates are landing 
top IT jobs. » 40 











START-UP 
SURVIVAL 


When Kozmo.com first 
started delivering con- 
venience store products 
to city dwellers in 1997, 
it was flying high. Now, 
it seems poised for a 
crash landing. But, say 
company officials, Koz- 
mo’s recent woes are 
perfectly normal for a 
new business, and 
they’re convinced it will 
weather the storm. But 
not everybody is as en- 
thusiastic. » 42 
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BiLL GODFREY of Dow 
Jones says cash will 
carry more weight than 
stock options among job 
applicants this year. 


HIRING 
RACE IS ON 


THE TALENT DROUGHT seems to be easing up as dot- 
commers start heading back to traditional com- 
panies. Now, the challenge for employers is to lure 
the prize workers before the competition gets to 


them. Many firms are willing to go to B , 


THE 





great lengths to succeed. 
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Are you confident that your current Web-hosting solution can handle your business growth? Don’t pay to be squeezed 


onto a cramped shared Web-hosting server. Team up with Dell,” an E-Commerce leader. With dedicated Web-hosting 


services starting at only $199 per month, we'll base your network on its own dedicated Dell PowerEdge™ or PowerApp 


server, featuring Intel® Pentium® Ill processors, which is monitored 24x7. It’s scalable and flexible enough to reconfigure 


as your business needs grow. In other words, perfect. 
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DellHost™ D-2950 
® Dell™ PowerApp.web™ 100 Server Appliance 
® Intel® Pentium® Ill Processor at 600MHz 
® 64MB SDRAM; 1X 9GB’, 7.2K SCSI HD 
® 2X 10/100 Embedded NICs 
® Red Hat® Linux™ 6.2 OS 
® Dedicated 21GB Monthly Transfer (Metered) 
8 TrellixWeb™ and NetObjects* Website Design Tools 
8 Complimentary 1-Yr VerticalNet® Storefront 
to Qualified Customers ($9400 Value) 


$ j 99 ime 


® Add Mercantec® Softcart® Pro for $99/mo 
with $99 Setup Fee 
® Add Traffic Analysis and Tools, Starting at $9.95/mo. 
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DellHost™ D-3250 
® Dell™ PowerEdge™ 2450 Server 
® 2X Intel® Pentium® ill Processor at 933MHz with 256K Cache 
® 512MB SDRAM; 2X 9GB’, 10K SCSI HD 
® Redundant Power; 2X 10/100 Embedded NICs 
s Red Hat®* Linux™ 6.2 OS; Single-channel RAID1 
® Dedicated 21GB Monthly Transfer (Metered 
= Complimentary 1-Yr VerticalNet® Storefront 
to Qualified Customers ($9400 Value) 
= 99.9% Uptime Guarantee”; 7x24 Tech Support 


$549 imo. 


® E-Com Options: Mercantec” SoftCart* Pro $99/mo 
plus $99 One-time Setup Fee. Transaction Fees Extra 
= Add Weekly Back-up for $75/mo. plus $150 Setup Fee 
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DellHost™ D-3350 


® Dell™ PowerEdge™ 2450 Server 
® 2X Intel® Pentium® Ill Processor at 1GHz with 256K Cache 
® 1GB SDRAM; 3X 9GB’, 10K SCSI HD 
® Redundant Power; 2X 10/100 Embedded NICs 
® Red Hat* Linux™ 6.2 OS; Single-channel RAIDS 
® Dedicated 21GB Monthly Transfer (Metered) 
® NetObjects® Fusion® 5 at No Additional Charge 
® Complimentary 1-Yr VerticalNet® Storefront 
to Qualified Customers ($9400 Value) 
= 99.9% Uptime Guarantee”; 7x24 Tech Support 


$799 imo. 


® E-Com Options: Mercantec® SoftCart* Pro $99/mo. 
plus $99 One-time Setup Fee. Transaction Fees Extra 
8 Add Traffic Analysis and Tools, Starting at $9.95/mo 


8 1-Yr Domain Name Registration from 
Network Solutions ($25 Value) 

® Professionally Designed 3-page Website from 
Dell™ Design Services ($389 Value) 

8 1 Year of Shared Hosting ($215 Value) 

® 100MB Storage 

= 5GB Transfer Rate 

® 10 E-Mail Accounts 


$399 for kit 
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GET EXACTLY WHAT YOUR BUSINESS IS LOOKING FOR 


| | 


888.783.6975 | WWW DELLHOST.COM 
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Decodin 
Dot-com 


| ing up with a technology start-up, de- 
| spite the so-called market correction? 


WHO IS HE? 

In his new book, Sizing 
Up a Start-up: Decoding 
the New Frontier of 
Career Opportunities, 
author Daniel S. Rippy 
tells IT pros how they 
can evaluate a job at a 
start-up. He also dis- 
cusses the early warning 
signs or success signals 
of a start-up. 


| 
| 
| 
| 
} 
| 


Thinking about jumping ship and sign- 


You might want to first pick up a copy 
of Daniel S. Rippy’s book, Sizing Up a 


| Start-up: Decoding the New Frontier 
| of Career Opportunities (Perseus Pub- 
| lishing, 2000). 


In the book, the first-time author and 


| former start-up veteran gives IT profes- 

| sionals a one-of-a-kind road map for 
evaluating the potential risks and 

| rewards of working at a technology 

| start-up. 


As Rippy points out, the success or 
failure of a technology start-up isn’t to- 


| tally unpredictable. He offers numerous 
| processes and insights that IT profes- 


sionals can use to evaluate a potential 
employer’s ownership, and the long- 
term potential and risk. 

Rippy, who lives in Dallas, spoke with 
Holly Hubbard Preston about what IT em- 
ployees should consider when joining a 
start-up. Rippy is director of mergers 
and acquisitions and business planning 
at CellStar Corp., a wireless distribu- 
tion company in Carrollton, Texas. In 
this role, he assesses business opportu- 
nities, many that may involve partner- 
ing with start-ups. 


What is the single biggest misperception 
that IT job searchers generally 
have about taking a position at a 
technology start-up? That one’s 
success is fairly assured at a 
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technology start-up, and that 
there really isn’t all that much 
risk. 


In your book, you write that 90% of 
all technology start-ups fail. 
What do you think are the over- 
riding factors for failure? Hiring 
the wrong people for key roles, 
and management underestimat- 
ing the competition, as well as 
the time and resources required 
by the company to bring a prod- 
uct or service to market. 





criteria do you recommend that 
job searchers use to evaluate a 
technology start-up prior to tak- 
© ing a job? Quality of the man- 
agement team; business plan 
and business model; board of 
directors — for example, the 
people affiliated with the ven- 








ture capital firms funding the start- 
up. The job seeker also has to have 
an understanding of the particular 
role and responsibility he or she 
takes on ... specifically, what expe- 
rience they will get from that op- 


portunity and what they will be able | 


to do with it even if the start-up 
doesn’t succeed. 


| How probing can or should a job seeker 


be in an interview with the manage- 
ment of a start-up? Given how hot 
today’s job market is, there are few 
questions you could ask that would 
be offensive. The interview more so 
than ever before is a two-way 


process. Job seekers are within their | 


rights to ask for a copy of the busi- 
ness plan, though they should be 
prepared to sign a confidentiality 
agreement. 

They should absolutely ask 
about the sort of funding the firm 
has received to date and who sits on 
its board of directors. The manage- 
ment team should be asked about 
the individual track records of its 
members, what they have learned 
from their successes and failures. 
“Why will you win?” and “What 
keeps you up at night?” are also 
very relevant questions. 

It is reasonable to probe into 
technology development plans for, 
say, the next 30 to 90 days and 
beyond; any risks there might be to 
that plan. Management should be 
able to talk very competently about 
that. 


| What are the major career risks a person 


will have to weigh prior to joining a 
technology start-up? You might join 
a company and find yourself out of 
a job within three to six months, 
and you will need to explain what 
happened and why. It does not have 
to be a setback, but you have to be 
prepared with a story of what went 
on and why you didn’t see the fail- 
ure coming. 

If you can explain that decision 
after the fact, that could be poten- 
tial knowledge to a future employer. 
If you end up at successions of 
failed start-ups and have to defend 
that track record, a prospective em- 
ployer may question whether you 
have good judgement. 


What are the primary points to consider 


when negotiating a job offer with a 
start-up? Salary, standard benefits 
package and possibly an equity 
stake. There are nontraditional ben- 
efits to consider, such as days off or 
a [Digital Subscriber Line] to the 
home ... benefits can involve an as- 
pect of creative control at the office. 


How much negotiating room should you 


expect with a start-up? Do you go in 
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It is reasonable 
to probe into tech- 
nology develop- 
ment plans for the 
next 30 to 90 days. 


DANIEL S. RIPPY, AUTHOR, 
SIZING UP A START-UP 


there assuming this is a cash- 
strapped management team that has 
little more than options to offer? 
I have seen people get paid a lot 
more than they would in certain 
corporate settings. I have also seen 
people take a 50% cut in pay to join 
a start-up. 

You absolutely need to find out 
what the pressure points are. 

Signing bonuses are increasingly 
common because companies are so 
desperate for talent but don’t want 
the recurring debt of high salary. 
Especially for IT people, there is a 
lot of flexibility that can be dis- 
cussed in terms of development 
milestones tied to performance 
bonuses. 


How much change in job description 


should a person expect to experience 
in his tenure at a technology start-up? 
It is perfectly reasonable to have a 
discussion about career path and 
promotion. But to expect that you 
will come in as a product manager 
and end up heading a division is 
probably unrealistic because people 
are hired for specific slots. Besides, 
when a company doesn’t meet 
growth plans, it is hard to promote 
people. Make sure that the role that 
you are entering at is one that you 
are excited about. 


What is the average job tenure for a 


person who takes a job at a technolo- 
gy start-up? Based on experiences 
of people I have talked to, it is prob- 
ably 18 to 24 months. 

Often, people will move on to a 
series of start-ups. ... They get 
hooked on that way of life. 








Hubbard Preston is a freelance writer in 
St. Helena, Calif. 





Any Data 
Warehouse Is Only 
As Good As The 
Brains Behind it. 


With the demand for ware- 

housing skyrocketing, 

you're juggling immediate 

eBusiness needs while 

creating an environment that 

can scale for future growth. 

DecisionBase™ is a complete 

software suite that gives you 

CA’s smartest technologies 

for designing, deploying, 

managing, and leveraging 

your warehouse and other 

eBusiness applications. Its 

foundation is the industry- 

leading PLATINUM® Repository, 

ensuring a central, shared source of metadata for rapid deploy- 
ment and better management of your warehouse and eBusiness 


ae : applications. 





eS eee What's more, 
DecisionBase exploits 
4 CA’s patented, self- 
learning Neugents™ to 
mine complex data 
patterns, predict busi- 
ness problems, and 
suggest courses of 
4 action. Now, you can 
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Software superior by design. 


capitalize on — 
before they happen — 
4 huge competitive oleae 
DecisionBase also pro- 
vides everything you need 
to help your knowledge 
workers make faster, better 
business decisions — from 
interactive BI dashboards to 
advanced visualization and 
portal technology. Plus, our 
mem CA Services” team has 
me the resources, knowledge, 
and experience you need 
to succeed. 
Catena the name: DecisionBase from CA. It’s the indus- 
try’s most intelligent solution for building your warehouse now. 
Building it right. And, best of all, building it smart. 


Call 1-600-890-7528 for more information on 
DecisionBase, or visit www.Ca.com/decisionbase 





Call us today to receive a FREE copy of the White 
Paper, “Putting Metadata to Work in the Warehouse,” 
sponsored by Computer Associates and published 
by techguide.com. Mention ad code: AD DW 0153 Di 
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Intelligent Answers Here 
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take in the exchange’s revenue 
Covisint Technology Partners Sign Equity Agreements | s:n'sssoss cc 
lump sum payment from Cov- 
BY LEE COPELAND a German antitrust agency de- | which include Japan-based | $300 billion in annual transac- | isint for the licensing of more 
It took two months of wran- | layed Covisint from operating | Nissan Motor Co. and France- | tions through the exchange. than 55 of its products. Mark 
gling and seven teams of | soonerpending antitrust probes. | based Renault SA, said they But Oracle and Commerce | Salser, senior vice president of 
lawyers to sort out the com- Covisint’s five backers, | hope to channel more than | One differ in how they'll par- Continued on next page 
plex equity structure at Cov- 
isint LLC, according to compa- 
ny officials. The bickering 
among the exchange’s backers 
underscores the challenge of 





getting such a massive opera- 
tion under way, analysts said. 


“The verdict i ) re , y Hy @ 
on schicenaaaekes a I f Oo n | y fin d : n g IT e xX p e rt i S e 
ones will succeed and when is ‘ 


sll up in the ait” aid Da within your organization 


Garretson, an analyst at For- 


“ech gu Inc. in Cam- * WwW e re t h ] Ss e a Ss y “ 


The procurement exchange, 





launched last year by the Big 
Three automakers, recently 
signed an equity agreement in 
which Covisint’s two lead tech- 
nology partners, Commerce 
One Inc. and Oracle Corp., will 
hold equal minority shares in 
the Southfield, Mich.-based 
start-up but different stakes in 





its revenue model. 


Competing Claims 


On Dec. 12, Commerce One 
announced that it was the lead 
player in Covisint. The ex- 
change will use the Pleasanton, 
Calif.-based vendor’s Market- 
Site software to process transac- 
tions, conduct online auctions 
and manage catalog content. 

Oracle disputed that claim 
the next day, contending that 
its technology forms the hub 
that applications like Com- 
merce One’s software plug 
into. Covisint will use Oracle’s 
enterprise resource planning 
applications to run its internal 
operations and Oracle’s Ex- 
change Marketplace to provide 
security, single sign-on and 
registration capabilities. 

Covisint officials said nei- 
ther Commerce One nor Ora- 
cle holds a lead position over 
the other as a supplier. 

General Motors’ Corp. 
brought Commerce One into 
Covisint, while Ford Motor Co. 
steered Oracle into the ex- 
change. The two automakers 
originally sought to build com- 
peting procurement market- 
places but decided to scrap 
those plans last February. In- 
stead, they combined their ef- 
forts along with German auto- 
maker DaimlerChrysler AG. 

The exchange has channeled 
about $1.5 billion in procure- 
ments since October. The U.S. 
Federal Trade Commission and 
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EMusic Sues MP3.com Over Copyrights 


BY JAMES EVANS 
EMusic.com Inc., an online mu- | 
sic provider, late last month | 
filed a copyright infringement 


San Diego and its My.MP3.com | 
streaming media service. 
he suit, filed in the USS. 


District of New York, alleges 
| that MP3.com is infringing on 
the copyright of some albums 





BUSINESS | 


for which EMusic.com owns 


| the digital rights. 


| lawsuit against MP3.com Inc. in | District Court for the Southern | 


EMusic.com in Redwood 
City, Calif., filed the complaint 
with six of its partner labels: 
Fearless Records, Fuel 2000 
Records, Gig Records LLC, In- 





Introducing Global Network IT 
from Raging Knowledge. Now it’s 
simple to find IT expertise within 


your organization. 


Global Network IT uses a robust 
inquiry-response collaboration system 
that enables your IT staff to easily 


locate and access the internal 


expertise they need to maintain 


mission-critical systems. It then 
archives the knowledge for transfer to 


the entire organization. 


It’s that easy! 


Global Network IT brings the expertise 
to you. In addition to finding and 
managing IT expertise, a portfolio of 


analytical management tools 


facilitates a clear understanding of the 
organization’s expertise, knowledge 


flow, and user participation. 


Turn your IT staff's expertise 
into a classroom of answers. 
Finding IT expertise is easy with Global 
Network IT. Experience it now. Visit us 
today at www.ragingknowledge.com, or 


call 212-430-3870. 


PAGING 
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visible Records, SpinArt Rec- 
ords and Victory Records. A 
spokesman for MP3.com said 
the company had no comment. 

MP3.com has faced a num- 
ber of copyright infringement 
suits during the past year. The 
Recording Industry 
tion of America in Washington 
targeted the company because 
of My.MP3.com 
which, in its initial configura- 


Associa- 


its service 
tion, allowed users to listen to 
their CDs from any computer 
with an Internet connection. 

Warner Brothers Music 
Group Inc., EMI Group PLC, 
BMG Entertainment and Sony 
Music Entertainment Inc. set- 
their against 
MP3.com for an estimated $20 
million each. 

Universal Music Group in 
New York continued its legal 
action, and on Sept. 6 a judge 


lawsuits 


found MP3.com guilty of “will- 


fully infringing” upon Univer- 
copyrights. MP3.com 
agreed to pay $53.4 million to 
Universal in mid-November 
My.MP3.com had been sus- 


| pended since April because of 
| the 


pending lawsuits. Two 
weeks ago, My.MP3.com began 
running again as a subscrip- 


| tion-based music service. B 


| Evans is a reporter at the IDG 
| News Service’s Boston bureau. 
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‘Covisint 


advance technology at Oracle, 


| said the firm would record the 

| » 1: . ' 
“large” licensing revenue in its 

| third quarter, but he refused to 


reveal the size of the payment. 
In contrast, Commerce One 


| will take a share of Covisint’s 
| Ate ss 
| transaction-fee-based revenue. 


| and Detroit-based GM 
| bought 14.4 million shares each 





It’s the only technology part- 

ner to receive such a deal. 
Dearborn, Mich.-based Ford 

also 


in Commerce One, worth a 
combined total of $1.26 billion. 

Kevin Prouty, an analyst at 
AMR Research Inc. in Boston, 
said it will take two to four 
years before Covisint begins 
generating profits relative to 
its capital and technology in- 
vestments. 

“Oracle is taking the short- 
term view of generating rev- 
enue right away,” said Prouty. 
“Commerce One is taking a 
high-risk, high-gain approach 
and the longer-term invest- 
ment.” D 
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PowerAp 
Web 100 


Dell™ PowerApp.web™ Starting at $2,000 


Go ahead and boost your Web volume up into the stratosphere. The PowerApp.web”™ Server is 
capable of supporting up to 13 million static hits a day. 

In addition, the Dell™ PowerApp.web Server (1U form factor, up to 42 servers in a rack) is 
pre-configured with optimized Red Hat® Linux™ or Windows® 2000-based Web-hosting applications, up 
to 1GB 100MHz ECC SDRAM, embedded NICs and feature Intel® Pentium® III processors. 

These servers are part of our complete line of Internet products and services including: 


two- and four-hour On-site Service®, Technical Consulting and Flexible Financing. 
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888.809.3355 | WWW.DELL.COM 
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AN EVENT FOR February 5-8, 2001 


Monterey 


| IT PROFESSIONALS BUILDING Conference Center 
eCOMMERCE DATA CENTERS os imuie 


Monterey, California 





(0 TECHNOLOGY FOR eCOMMERCE 


~~ COMMERCE 


INFRASTRUCTURE TECHNOLOGY 
CONFERENCE & TRADESHOW 





SEMINAR TRACKS: 


Tracki: Server, network, and storage system design and ASSOCIATION 
implementation WORKING 

Track 2: Application integration and network/storage/ GROUP ~* 
application outsourcing services MEETINGS 


Track 3: I/O Technology for eCommerce 








| CONFERENCE HIGHLIGHTS: 
| Hear from I/O Founders Intel, Microsoft, IBM, Compaq, EDUCATIONAL 
Sun, Hewlett-Packard SEMINAR 
I/O Market Makers - New I/O Technologies SERIES 
I/O Masterminds Panel - In it’s third year 
I/O Technologies Forum Awards Program 





| PARTICIPATING ASSOCIATIONS: 


SERVER I/O 
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e FCIA e VIA 





REGISTER ON-LINE AT 
vide toyed aitniababeeolnaie ace os ia 


event information, registration, and exhibitor pt ts and protile 


| eae _ named Rosen asieson “® searchsi com = Quan pels Int r@) *2 REGISTER 
OUT s r je@5h Hel Cc Mi 

ini OUTSOURCING JOURNAL Ses IS1T.com Ry) trueSAN “adap a BY PHONE AT 

I 


: Arstititto beter mL tusion TalWire el (805) 569-5610 
ntel 


fi STORABILITY INFOSTOR TechWeek 














yo ene >>” 


-_— = hl FC 





An Editorial Supplement to Computerworld / january 1, 2001 








Bet eo Ss aaa 
| 








Finally. 


A PC Alternative 
That Makes 
Everybody Happy. 


@ 





Maxspeed 





Ellen Fanning 


MANAGING EDITOR 
Michele Lee 


ART DIRECTOR 
April O’Connor 


WRITERS 
Steve Alexander 
Pimm Fox 

Kevin Fogarty 
Matt Hamblen 
Michael Meehan 
Robert L. Mitchell 
Deborah Radcliff 
Dawne Shand 
Carol Sliwa 
Patrick Thibodeau 
Steve Ulfelder 
Jaikumar Vijayan 


COPY EDITORS 
Jean Consilvio 
Jacqueline Day 
Eugene Demaitre 
Jamie Eckie 

Linda Frank 
Michael Parent 
Bob Rawson 
Monica Sambataro 


ILLUSTRATOR 
Maria Rendon 


DESIGN DIRECTOR 
Stephanie Faucher 


COMPUTERWORLD 
EDITOR IN CHIEF 
Maryfran Johnson 


COMPUTERWORLD 
EDITORIAL DIRECTOR 
Patricia Keefe 


Copyright 2001 by Computerworid 
inc. All rights reserved. Computer 
worldcan be purchased on 35mm mi 
crofiim through University Microfilms 
Inc., Periodical Entry Dept., 300 N. 
Zeeb Road. Ann Arbor, Mich, 48106. 
Photocopy rights: Permission to pho- 
tocopy for internal or personal use of 
specific clients is granted by Comput- 
erworld Inc. for libraries and other 
users registered with the Copyright 
Clearance Center, provided that the 
base fee of $3 per copy of the article, 
plus 50 cents per page, is paid direct- 
ly to Copyright Clearance Center, 27 
Congress St, Salem, Mass. 01970. 
Reprints (minimum 500 copies) and 
permission to reprint may be pur- 
chased from Ray Trynovich, Reprint 
Management Services, P.0. Box 
5363, Lancaster, Pa. 17606-5363; 
(717) 560-2001, Ext. 24. For subscrip- 
tions, call toll-free (800) 669-1002. 
Requests for missing issues will be 
honored only if received within 60 
days of issue date. Subscription rates: 
$4 per copy; U.S. - $48 per year: 
Canada - $110 per year; Central and 
So. America - $150 per year; Europe 
and all other countries - $295 per 
year (airmail service). 


AGENDA ITEMS... 


8 Learn the Politics of Going Global 


A global strategy means more for IT than just 
creating a worldwide network infrastructure, setting 
up foreign distribution or hiring talent abroad. You’ve 
got to know the laws and customs. By Steve Alexander 


Keep the Government Off Your Back 


IT managers used to be content to be experts on 
servers, operating systems and networks. Now, add 
public policy to that list. By Patrick Thibodeau 


Piumb Your Clickstream Data 

& . Clickstream data has grown wildly, 
but many companies’ ability to 
analyze it hasn’t kept pace with their 
ability to capture it. The next frontier? 
Creating a “360-degree view” of your 
Web site’s visitors. By Steve Ulfelder 


Develop Your Web Content Strategy 
Businesses will use the Internet in the coming year 
to streamline sales, not as a reason to launch ad 
campaigns. IT’s mandate for 2001: Use the Web to 
build a reliable customer base. By Michael Meehan 


Plot Your B2B Integration 

Once you've built an on-ramp to a business-to- 
business marketplace, you'll have to integrate data 
into back-end applications. Be ready to learn the 
finer points of middleware and XML. By Carol Sliwa 


26 Snag the Best Talent 


=magg How do you lure top talent to your 
company? First, determine your 
company’s future needs, and then 
develop a strategy for finding those 
skills. And remember: Everyone sells 
the company. By Dawne Shand 


33 Retool Your Data Center 


Transforming your data center for e-business is a 
challenge you may have to face in 2001. Do you know 
what you need to do? By Jaikumar Vijayan 


36 Pick Your Security Officer’s Brain 


Distributed denial-of-service attacks 
self-replicating e-mail viruses and 
electronic-security insurance were a 
few of the items on security officers’ 
watch lists last year. There’s more to 
come in 2001. By Deborah Radcliff 


41 Strategize Your Win 2k Migration 


For many of you, a migration to Windows 2000 is on 

the 2001 agenda. It’s a complex process, but those who 
have traveled that road say it needn’t be painful — if 
you know the issues up front. By Robert L. Mitchell 


44 Get Payback on Wireless 


Getting a return on investment from 
your wireless project can be done. 
We talked with users who failed at 
gee (first but learned from their mistakes 
and ultimately achieved success. 
im. By Matt Hambien 


EDITORIAL OPINIONS . 


6 _ IT’s Agenda for 2001: 
Don’t Forget Your Compass 


The IT seas are going to be choppy this year, writes 
columnist Kevin Fogarty. Here’s what you can expect 
will change in your enterprise in 2001. 


2001: Another Odyssey for IT 

This will be the year the New Economy keeps 
reinventing itself, says columnist Pimm Fox. And IT 
managers will have more power — and responsibility 


[ EDITOR'S NOTE ] 


OVEMBER’S ELECTION DEBACLE got me thinking. Sure, 

folks were divided about which candidate should lead the coun- 

try, but from the uncertainty and confusion came a simple truth: 

Everyone agrees that we should, in fact, have a president. Same 

thing for IT: You might not agree with your colleagues about 
which tasks should be on your agenda for 2001, but you're quite sure you 
should have an agenda. A to-do list, a watch list, a laundry list - whatever 
you call it, you need a blueprint for the year. 

In the following pages, that’s what you'll find - 10 action items we feel 
should be on your list for 2001, presented as stories sprinkled liberally with 
advice on how to get results. This advice carries some common themes. Let's 
say you're planning a wireless or Web content strategy. Other IT managers 
advise you to start small: Learn lessons from small-scale wireless trials and 
establish reliable online customer service before expanding your Web effort. 

Is this the year you'll get a handle on your clickstream data or plan your 
business-to-business integration? You'll need to put together a cross-enter- 
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prise team for both tasks. Join with your marketing department to get the 
best use from your customer data, and appoint a full-time team to develop 
deploy and maintain a business-to-business infrastructure. And whether 
you're revamping your data center for the Web or migrating to Windows 
2000, you'll need to prioritize your applications according to how critical 
they are to your business. 

The need to be in recruitment mode all the time is another major theme 
in our stories. In 2001, you'll need a security expert to thwart break-ins, a 
privacy expert to keep an eye on legislation in Washington and a local cul- 
ture expert to deliver appropriate content for your global Web initiatives 

Maybe the most important advice of all is to get involved. Weigh in on 
the development of security standards and the online tax question. Help 
shape privacy legislation. 

And one more thing: You need an agenda for the new year, so why not 
plan it now? 

- Ellen Fanning 
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If you'd like a chance at winning the hottest ride in decades, then you'll need to step on the gas and enter our 
sweepstakes at win.Jiebert.com. When you visit our site you'll learn why Liebert is the most reliable name in 
critical systems protection and you'll get a shot at winning a PT Cruiser. 
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Enter our sweepstakes today...you could win a Chrysler PT Cruiser! You'll also learn 
how Liebert can help shift your critical systems protection to “continuous availability”. 





3rd Prize - The Foundation” Mini Computer Room 

It offers comprehensive critical system protection by integrating power 
protection, environmental conditioning, and site monitoring - all the 
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No purchase necessary to win. 
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BY KEVIN FOGARTY 


AST AUGUST, an amateur sailor 
named Eric Abbott was arrested 
by the British coast guard after 
running his homemade boat 
aground off the coast of Wales. 
According to a Reuters report, it 
was the lith time they'd had to 
rescue the unemployed painter, 
who, at one point, had tried to navigate across 
the Irish Sea using a road map. 

Yep. A road map. Plenty of information on 
roads and everything to get you to the sea, but 
nothing on the currents, shoals and other haz- 
ards you find once you actually get on the sea. 

That’s roughly the situation most IT man- 
agers find themselves in during major technol- 
ogy projects — which are often driven forward 
by eager users and unctuous vendors who 
then leave the actual implementation in the 
hands of IT people who have no idea what the 
real problems will be. 

They that go down to the sea in ships, after 
all, sometimes don’t come back. 

The IT seas are going to be chop- 
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ing, sometimes from traditional IT 
vendors but just as often from makers of gad- 
gets for consumers. So, what will change in 
your enterprise in 2001? 

Will wireless technology finally turn into 
something useful, or is it strictly a toy for 
execs? Wireless can really have serious opera- 
tional benefits. But even for the feet-in-the- 
street businesses like utilities and delivery 
companies, for whom the payoff in efficiency 
of field workers is most obvious, the imple- 
mentation can be long, difficult and expensive. 

The need to increase bandwidth and make 
network connections more flexi- 
ble may also drive more users to 
overhaul their network infrastruc- 
tures with optical switching and 
satellite links. 

More scary are less-esoteric 
upgrades like Windows 2000 or 
Win 2k Datacenter, both of which 
users approach with caution. 
Even now, nearly a year after Win 
2k shipped, early adopters advise 
newbies to plot a slow, careful 
course. But caution isn’t easy to 
sell in a do-it-now, e-commerce- 
obsessed environment. m 


He can be rea 
kevin_fogart 


Kevin Fogarty 


E-commerce customers are demanding that 
you know who they are when they hit your 
site and that you give them exactly what they 
want: speed and fast service. But they also 
want to protect their privacy, so they don’t 
want you to actually use that information. 

Ugh. 

This year, clickstream data analysis will turn 
many IT people into market researchers. But 
to make that work, they have to connect Web 
site analysis closely to the old-style data cen- 
ters that serve the rest of the customer service 
function. That requires not only technical and 
political savvy, but also a sense of adventure. 
(Take an old-school data center manager and a 
23-year-old webmaster to lunch sometime and 
let them talk integration. It’s like watching the 
Jerry Springer Show.) 

The redundancy, reliability, backups and 
other processes built over the years to keep 
the critical applications up 99.99% of the time 
can’t go away, but they have to talk over IP, run 
on networks that are reconfigured rapidly — 
or outsourced — and be scalable enough that 
you don’t get swamped if your site succeeds. 
Add to that the headache of negotiating with 
both suppliers and competitors to create XML 
lexicons and other standards that let you build 
workable business-to-business connections, 
the continuation of a skills crunch that’s dri- 
ving up IT salaries for the people you can find, 
and, well, “ugh” again. 

There’s good news, too. XML standards ac- 
tually are being developed, enterprise applica- 
tion tools that help connect the back end to 
the front end have made enormous progress, 
and some parts of the picture are getting sim- 
pler. And it’s not always the hottest Web sites 
that are the most successful. Sometimes, sim- 
plicity (of design, if not the technology behind 
the interface) does pay off. 

A year ago, the dot-coms were kings of the 
hill. They had all the money; they set the agen- 
da; and it was their standards to which every- 
one else was held, even if they themselves 
didn’t meet those standards. 

Now, reality has set in. The business picture 
is clearer and more restrained. Good business- 
es with good systems are figuring out how to 
adapt to the Web. Start-ups are figuring out 
how to build the infrastructure and reliability 
they need to succeed. The e-commerce path 
hasn’t yet been mapped, but many of the goals 
have been defined. 

No IT organization has to be all things to all 
people. No Web site has to deliver every fea- 
ture the technology enables. 
Smart companies are looking at a 
host of options and actually tak- 
ing the time to figure out which 
ones make sense. And the chaos 
that is the computer business pro- 
vides the opportunity and the 
tools for them to do that. 

Oh, and Eric Abbott? He agreed 
to take navigation lessons, but he 
still believes he can get where he’s 
going without necessarily knowing 
where he is. Even when the way is 
as uncharted as the tech world is 
these days, that boat don’t float. + 
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“STORAGEAPPS 
MAKES OUR BUSINESS | 
MODEL WORK.” 


Tornado Development started with a hot 

idea — provide a better way to manage the 

constant waves of information from voice 
mail, e-mail, pagers and faxes. The challenge: how 
to implement Tornado Messenger so that it works 
seamlessly with the infinite variety of systems, 
servers and storage that telco, ASP and ISP 
customers already were using. 


That’s why Tornado relies on the Proactive Network 
Storage Solutions™ portfolio from StorageApps. 


“StorageApps gives us something other storage 
companies can’t match: true any-to-any connectivity, ” 
explains Kevin Torf, Tornado’s Chairman and 
Founder. “And they offer carrier-class functionality 
at a better price, as well.” 


Kevin Torf, Chairman and Fou 
Tornado Development Inc. 


With StorageApps SANLink™ storage appliances 

as the foundation of its solution infrastructure, 
Tornado hosts messaging solutions for ASPs, ISPs 
and carriers of all sizes around the world. And for 
customers who prefer to buy, Tornado provides 
SANLink as part of a turnkey solution. “StorageApps 
is a real partner. They provide the technology we 
need to make our business model work,” Torf says. 


“Bottom line, what StorageApps really gives us is a 


smarter way to deliver customer value 


To find out more about smarter solutions for 
network storage, visit us at www.storageapps.com 


StorageApps. 


The Smarter Approach” 
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BY STEVE u 


ALEXANDER 


S YOUR COMPANY GOING GLOBAL? Don’t 
be fooled. Pursuing a global strategy 
means more for IT than creating a 
worldwide network infrastructure, set- 
ting up foreign distribution or hiring 

IT talent abroad. 

Whether the international presence is 
online or involves setting up operations in oth- 
er countries, without some research into the 
customs, delivery costs and employment laws 
in other nations, global expansion could spell 
global disaster. 

In 2001, going global will require that you 
think about your department’s international 
role in new ways. For example: How will the 
content of your Web page be interpreted in 
various countries? Will the variable costs of 
international shipping sink your supply-chain 
management software? Will you be able to 
hire scarce IT talent or change work proce- 





dures without running afoul of laws in other 
countries? 

While it’s difficult to answer these questions 
before roiling out a global IT plan, waiting 
until afterward could be catastrophic. The 
rules aren’t always clear, so we asked some IT 
experts for advice on what to consider before 
venturing into international markets. 


Avoid Personne! Pitfalls 

Maryann Goebel, CIO at General Motors 
Europe in Maidenhead, England, discovered 
that IT personnel issues abroad bear strong 
similarities to those in the U.S., but with some 
important differences. 

Goebel has been in Europe for two years. 
Prior to that, she was based in the U.S. as CIO 
of GM’s Truck Group in Pontiac, Mich. She 
now has 13 direct reports, but there are ap- 
proximately 300 GM IT employees in Europe 
and thousands of contractors and suppliers. 

In Europe, much like in the U.S., IT talent is 
in high demand, so it’s important to plan ahead. 
“Employees in Europe generally have employ- 
ment contracts with their companies, and 
these contracts usually stipulate how much 
time the employee must stay on once he or 
she gives notice. The standard notice period is 
two to three months,” Goebel says. 

“In my experience, the amount of time the 
employee must stay on is negotiable,” she says. 
“But I’ve been in a range of situations. In one 
case, the employer was willing to let the em- 
ployee move on in two weeks. In another 
case, the employee had to fulfill the full term 
of the contract after giving notice, because the 
employee was in the middle of a project.” 

Those restrictions can affect the time it 
takes some companies to fill IT vacancies. But 


the employment contract requirement can 
work in the employer’s favor in that it pro- 
vides time to hire a replacement when an 
employee decides to leave. 

And the contract market in the U.K. offers a 
good supply of qualified IT talent that can be 
used to fill gaps in staffing, assist in short-term 
projects or provide specific skills. 

“If you find that it’s taking more time to hire 
people than you anticipated — for example, 
you're waiting for someone to come to work 
once you find them — then a viable option is 
to hire a contractor,” Goebel says. 

One other difference: Compared with the 
U.S., it’s much more common for European IT 
woikers to be members of unions. Therefore, 


Checklist 


@ Research local employment laws that could 
affect your company's hiring plans abroad. 


@ Use Web software that determines delivery 
costs and export-regulation compliance for 
individual countries 


@ Customize Web content where possible to 
avoid conflict with local customs and attitudes 


@ Improve Web marketing by tailoring e-com- 
merce content to local holidays and events 


employment represents a partnership of the 
employee, the employer and the union that 
represents the employees. 

“In these cases, for example, all members of 
the employment partnership are informed and 
consulted regarding major organizational 
changes, so that the best overall solution is im- 
plemented,” Goebel says 


Think Like a Local 


International marketing can result in prob 
lems if your Web content is misinterpreted, 
says Larry Clopp, an international trade ana 
lyst at Gartner Group Inc. in Stamford, Conn 

Clopp recalls the story of a car manufac- 
turer in Mexico. “Its Web page showed a 
picture of a hiker standing next to a car. But 
in Mexico, hikers are poor people who can't 
afford cars, so it wasn’t acceptable to show 
someone who wanted to be a hiker,” he says 

“You need a separate cultural focus for your 
Web site in some countries,” Clopp says. “A 
few Web sites do a good job of this by hiring 
country content managers who manage the 
content locally and make sure the Web pres- 
ence is effective in that country.” 

You should also consider further segment- 
ing local content to address different language 
groups. “How else can you manage your Web 
content in India, where you’ve got more than 
20 spoken languages?” Clopp says. 

Of course, it’s impossible for IT depart- 
ments to anticipate all of the potential cultur- 
al mistakes. So it’s important to accept that 
there are risks, think hard about what you’re 
hoping to achieve and know you can’t avoic 
all problems. 

“Given the vast differences in economics 
and culture around the globe, it’s going to be 
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difficult to hit it just right in all cases,” says 
Stewart Morick, the Americas’ leader for 
e-business in the consulting practice of Price- 
waterhouseCoopers in Baltimore. “To do so, 
you might have to redo your product branding 
in every country, which isn’t practical. So 
there’s got to be balance” between cultural 
sensitivity and marketing needs. 

Some cultural mistakes are inevitable 
because of the speed at which IT departments 
must move to roll out global marketing tools, 
Morick says. “In today’s world, IT people have 
to move a lot faster. It’s not like implementing 
an ERP system in two years. Global Web mar- 
keting software is being delivered in 90 to 180 
days,” he says. “So you may offend some peo- 
ple just because of the speed at which you 
work and the fact that lots of people around 
the world will use your software.” 

Clopp says many IT departments and com- 
panies will find out soon whether they’ve vio- 
lated any cultural taboos. In 2001, as more U.S. 
companies begin doing business-to-consumer 
and business-to-business e-commerce in Eu- 
rope, it will become apparent which Web fea- 
tures transcend national cultures and which 
ones don’t, he says. So learn how to avoid 
some of these pitfalls from the pioneers who 
have gone before you. 


Test Your Supply Chain 

Beyond matters of cultural taste, there are 
supply-chain issues to consider in global ex- 
pansion. You need to determine ahead of time 
whether e-commerce software can really han- 
dle your international transactions. 

“We suggest companies look at such supply- 
chain issues as their ability to deliver goods or 
make financial refunds” based on Web site 
purchases, Clopp says. 

For example, U.S. goods being returned to 
the U.S. would be free of any duties that must 
be paid on some foreign goods. But special 
documents are required if a U.S. company is 
accepting the return of goods that were manu- 
factured in another country but sold via the 
Web page of a U.S. corporation 

It’s important to understand the real cost of 
shipping of goods ordered via the Web world- 
wide. Sometimes, local delivery expenses 
make the purchase of products through a Web 
page too costly for the buyer, which raises the 
question of whether the e-commerce site 
should have sold the product in that country 
in the first place, Clopp says. 

“It’s the issue of total delivered cost — what 
will the customer actually pay?” says Clopp. 
He cites a recent example involving a U.S.- 
based company: “A customer in Brazil bought 
a $20 CD, but when the CD got to Brazil, the 
total deiivered cost to the customer was $160 
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due to transportation, customs, customs [fees] 
and taxes,” Clopp says. “If you are running a 
Web-based exchange, marketplace or auction, 
you will need software that calculates the total 
delivered cost for every country.” 

Companies selling goods on which there are 
export restrictions, such as high-performance 
computer equipment, will need software that 
makes sure a purchased item can be sent to 
the country from which it was ordered. 

Today, most companies that operate e-com- 
merce sites don’t have the software required 
to calculate total delivered cost or ensure 
compliance with export restrictions, Clopp 
says. As a result, they’re often forced to de- 
cline international orders, which in some 
cases account for more than half of all orders 
placed via a Web site. That creates two prob- 
lems: Companies lose sales and run the risk of 
alienating potential customers. 

“If a customer places an order, then gets 
a reply two or three days later that you don’t 
support commerce to that country, that doesn’t 
make you any friends at all,” Clopp says. 

You also have to be aware of each country’s 
tax laws that can affect e-commerce. 

“Tax laws vary and are changing. Some 
countries now want a tariff or tax on Internet 
sales. And because information is now being 
considered a product in some countries, the 
question that’s being raised is whether or not 
you can tax information,” Morick says. 

But while there are many pitfalls for IT to 
avoid in international markets, there also are 
opportunities that are often overlooked. Make 
sure you personalize your Web page content 
for local audiences. While this may require 
extra work, few companies are trying it, so the 
payoffs could be huge. For example, brick-and- 
mortar retailers usually do a good job of at- 
tracting buyers by offering sales based on local 
special events; online retailers could do the 
same if IT segments the e-commerce presen- 
tation by country, Clopp says. 

“Internet companies could pay more atten- 
tion to big international special events, such as 
the Olympics, and to other local events, such 
as national holidays,” Clopp says. 

“There is a lot of marketing in brick-and- 
mortar stores for All Saint’s Day in Mexico 
and Bastille Day in France. You don’t find that 
on the Internet today, but I think you’re going 
to see a lot more events-based marketing in 
international e-commerce,” he says. “Compa- 
nies are going to be able to keep track of holi- 
days and promotions in the local retail market 
and offer the same marketing message and 
promotions on their international Web sites as 
the brick-and-mortar stores do.” 

There’s much to learn from the experience 
of IT departments that have ventured into 
global marketing, but Morick warns IT people 
not to blindly copy what others have done. 

“Just because somebody else is doing it 
doesn’t mean you need to. The things you do 
must be economically and culturally right, and 
they must be aligned with your company’s 
strategy,” Morick says. “There is more to it 
than just putting technology in place.” + 





Alexander is a freelance writer in Edina, Minn. 


Employees in Europe generally 
have employment contracts 
with their companies, 
and these contracts usually 
stipulate how much time 
the employee must stay on 
once he or she gives notice. 
The standard notice period 
is two to three months. 
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BY PATRICK THIBODEAU 


NCE UPON A TIME, IT man- 
agers could be content to be 
experts on servers, operating 
systems and networks. But not 
anymore. Now, add public pol- 
icy to that list. 
The trend in government, 
both domestically and interna- 
tionally, is toward more regulation that affects 
technology. And IT managers say they '.ave no 
choice but to examine how to keep the govern- 
ment out of their companies’ systems. 

“Any company that is becoming involved 
with the Internet has to keep abreast of what 
the feds and the state governments are doing,” 
says Ken Cohn, CIO at Potomac Electric Pow- 
er Co. (Pepco) in Washington. 

Regulation can affect how a firm stores and 
shares data, and staying up-to-date is “part of 
the job nowadays,” says Jerry Rode, IT direc 
tor at Saab Cars USA Inc. in Norcross, Ga. 

There are three major regulatory issues that 
should be on your radar screen this year: priva- 
cy, taxation and security. Privacy concerns are 
prompting regulatory action in Congress, and a 
further tightening of controls is expected in 
Europe. As for taxes, governments worldwide 
are searching for ways to ensure that e-com- 
merce transactions won't undermine sales tax 
collections (U.S.) and value-added taxes (Eu- 
rope). Businesses are also seeing a government 
demand for improved data security as a matter 
of privacy and national security. 

“I think we're going to see more government 
regulation, both on the federal and state lev- 
els,” says Cohn. 

The specter of more regulation makes im- 
proved interaction between the CIO and other 
business units an imperative. For instance, this 
past summer, Pepco created a security com- 
mittee led by its general manager of internal 
audit. Its members include the CIO and repre- 
sentatives from legal and government affairs. 


The committee is working to ensure that phys- 
ical assets and cyberassets are protected from 
intrusion and that all of the company’s key 


departments are kept informed of government 
regulatory and legislative activities, says Cohn. 

Companies must ensure that they have 
mechanisms in place for sharing information, 
says Robert Rothman, director of legal affairs 
at e-GM, the e-commerce division of General 
Motors Corp. in Detroit. Rothman is part of 
that division’s management board, whose 
members include IT as well as representatives 
from the company’s other major business 
units. All of these managers discuss govern- 
ment regulation issues, he says. 

Decisions are made with input from all parts 
of a company today, says Rothman. “It would 
be foolish to try to silo that stuff — that doesn’t 
work,” he says. 

Help Shape Regulation 

The key is to get involved; don’t just wait for 
regulation to arrive. 

Many Fortune 1,000 companies have gov- 
ernment affairs offices to lobby, monitor and 
report on regulatory trends. But as an IT 
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manager, you also have the power to directly 
influence the outcome of legislative and regu- 
latory issues. 

Peter Browne, who heads information 
security at Charlotte, N.C.-based First Union 
Corp., is among those in IT who take an 
active role in shaping regulation. 

You have to be proactive and interactive 
with government bodies on issues that affect 
your systems, Browne says. He does so, in 
part, by making sure he responds in writing to 
requests for comment by government agencies 
on regulatory proposals, such as the informa- 
tion security regulations for financial institu- 
tions that are being developed by the Office of 
Comptroller of the Currency, the Federal Re- 
serve and other regulatory agencies. 

And get involved with others who share 
similar concerns — there’s strength in num- 
bers. CIOs should network on government 
issues and attend industry meetings. 

“Tt’s really going to be tough if everybody 
tries to go it alone. I just don’t think that’s go- 
ing to work,” says Ronald Plesser, a Washing- 
ton attorney who represents several compa- 
nies on privacy issues. 


Keep an Eye on Washington 

Most experts say they believe that Con- 
gress will almost certainly pass some kind of 
comprehensive privacy legislation in 2001 
that will affect e-commerce. But almost any 
legislation, no matter how broadly written, 
could have a very detailed impact on a com- 
pany’s systems, so it’s important to stay in 
the loop. 

For instance, when Congress approved the 
Gramm-Leach-Bliley Act in 1999, the land- 
mark financial-modernization measure in- 
cluded a provision on consumer privacy and 
the security of consumer information. The 
language in the legislation was very general, 
but it led to a lengthy and complex series of 
proposed rules written by federal regulators 
that may affect financial services in very spe- 
cific ways. 

The proposed rules would require safe- 
guards such as penetration testing by an inde- 
pendent third party or internal independent 
party, encryption of data and increased re- 
sponsibility for an outsourcer’s data security 
practices. 

The health industry is facing similar regu- 
latory controls through the Health Insurance 
Portability and Accountability Act, passed by 
Congress in 1996, which also mandates data 
security protections. As part of that ongoing 
regulatory effort, the U.S. Department of 
Health and Human Services recently un- 
veiled standard formats for processing claims 
and conducting other administrative tasks 
electronically. 

Je’re starting to see regulatory interest” in 
security issues, says Robert Miller, deputy di- 
rector of the federal U.S. Critical Infrastruc- 
ture Assurance Office in Washington, which 
has been working to increase national security 
through improved data protection in govern- 
ment and in the private sector. 

“This is hardly coordinated government reg- 
ulation; this is not being done by the admin- 


istration, but I think it’s a harbinger of where 
informed opinion is coming out on this,” 
says Miller. 


Run a Textbook Network 

Privacy abuses and more security breaches 
at companies could also spur government 
regulation and legislation. Congress has ex- 
pressed enormous interest in these areas and 
holds hearings on the latest headlines, such as 
this past year’s massive distributed denial-of- 
service attacks. Congress has been critical of 
companies that either publish convoluted on- 
line privacy policies or don’t post their poli- 
cies at all, so make sure your policy is posted 
and to the point. 

A good defense is to “be on your best behav- 
ior and essentially run a textbook network,” 
says Karl Dubendorf, an information risk ex- 
pert at KPMG LLP in New York. “What I think 
that sends [is a message] that we’re responsi- 
ble” and that IT doesn’t need the government 
to be “looking over our shoulders to see that 
we do our job right.” 

In this regard, industries would be much 
better off regulating themselves, says Mark 
Barry, vice president of IT at Chicago-based 
railroad car provider TTX Co. and president 
of the Chicago chapter of the Society for In- 
formation Management. 

“We jealously guard all information about 
business partners and users because we con- 
sider it a competitive advantage, not because 
the government told us to,” says Barry. 

But regulation, he says, will be primarily 
aimed at companies that sell to consumers, 
where data protection is more of a public issue 
with lawmakers, and not at business-to-busi- 
ness firms. “I think [business-to-consumer] 
models are more subject to regulation because 
consumers want their rights protected and 
their privacy protected,” Barry says. 


Join the Tax Debate 


You'll also need to weigh in on the online 
tax question this year. Thirty-seven states are 
currently at work on plans to simplify taxes 
through legislative changes and the develop- 
ment of a system for handling sales tax trans- 
actions over the Internet. The states might 
create a third-party intermediary for online 
tax collection between a business and con- 
sumer. As envisioned, such a third party could 
reduce the administrative burden for busi- 
nesses by collecting taxes and ensuring that 
the states get their shares. 

Many states rely heavily on sales taxes to 
fund basic services and see the expansion of 
online sales as additional revenue for their tax 
bases, say experts. Businesses will need to con- 
sider how debate over this issue may ultimate- 
ly affect their e-commerce systems. 

“The states aren’t going to give up on this; 
it’s just too big. So they are going to strive to 
find a way to get that revenue,” says Kent 
Johnson, a tax expert at KPMG. 

“Companies ought to get involved in the 
process, because they are going to have to live 
with the result,” he says. “If they are involved 
in the process, they can at least have a say in 
fashioning it.” + 


Checklist 


@ Stay abreast of government actions. 
Big-picture legislation can affect systenis 
in complex and specific ways 


@ Respond to government requests for 
comments on regulatory proposals, and 
network with others in the industry. 


@ Be good. Lawmakers are on the hunt for 
examples of privacy abuses and security 
breaches to illustrate the need for new laws. 
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BY STEVE ULFELDER 


ECENTLY, David Cameron 
needed to put his young 
daughter on an airplane. He 
figured he might as well start 


building her a cache of fre- 
quent-flier miles, so before 
making the reservation, he 
says, “I went to the airline’s 


Web site and was able to enroll her [in the 
& frequent-flier program] instantly.” 

Cameron is vice president of database 
integration services at Wheelhouse Corp. in 
Burlington, Mass., which designs Internet 

ons marketing infrastructures, so he had a profes- 
sional interest in what would happen next. 

After securing the frequent-flier number, 
he waited an hour to call the airline’s reserva- 
tion system, assuming that would give the on- 
line frequent-flier data enough time to sync 
up with the reservation system. “I thought an 
hour was generous,” Cameron says. “But the 
reservation system hadn't even heard of her 
frequent-flier number.” In the end, he says, it 
took three days for the data sources to be 
merged. 

The story illustrates one of the top chal- 


lenges facing businesses in 2001: making bet- 
ter use of the customer data captured ona 

Web site. This “clickstream” data, often de- 
scribed as the footprints visitors leave at a site, 
has grown wildly — large businesses may 
gather a terabyte of it every day. But compa- 
nies’ ability to analyze such data hasn’t kept 
pace with their ability to capture it. 


Experts say the next frontier of Web data 
analysis is better integration of clickstream 
data with other customer information, such 
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as purchase history and even demographic 
profiles, to form what's often called a “360- 
degree view” of a site visitor. 

This year, you and your company will face 
other questions related to clickstream data as 
well. Who should take the lead on data analy- 
sis? Is outsourcing such sensitive data a viable 
option? And how do you gather and use the 
data your company needs while maintaining 
a strong privacy policy, which is growing in- 
creasingly important to consumers? 


Track Your Visitors’ Footprints 
Clickstream data shows which pages of a 
site were visited and in what order, as well as 

how long the visitor remained at each page. 

The data, if used properly, can be a gold 
mine. The problem, say experts, is that few 
businesses use clickstream data properly: 
Companies simply rake in all the raw data 
they can but have a limited ability to under- 
stand what all that information can potential- 
ly tell them. 

So, what data do you need to track? Perhaps 
the most common footprints captured are the 
first ones site visitors leave: When did they 
enter, and from where did they come? The 
answer to the latter question, often called the 
“referral URL,” is vital to businesses seeking 
to figure out where customers come from. 

Visitors may have typed in the company 
Web address manually, but it’s more likely that 
they clicked on a banner advertisement or 
some other link. If they entered the site via a 
banner ad, it’s handy to know where the ad ran 
so you can evaluate the effectiveness of vari- 
ous marketing and advertising strategies. 

You'll also need to track the duration of 
each visitor’s stay; how many pages the visitor 
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Checklist 


Combine clickstream data with other in 
formation, such as a customer's purchase 
and service history, to maximize its value: 


Consider outsourcing: Let somebody else 
worry about the sheer quantity of your 
clickstream data. 


Make sure your company’s marketing 
executives fully understand your technol- 
ogy’s capabilities and limitations 


looked at and in what order; which products 
were viewed and which, if any, were pur- 
chased; and where a user ditched the site. 


This latter information is critical to retailers, 


which are constantly vexed by the phenome- 
non of the abandoned shopping cart. Reports 
indicate that as many as three quarters of 
online shoppers who put items in a cart bail 
out before completing their purchases. 
There are many possible reasons for this. 
Privacy advocates say many shoppers balk 
when asked for their credit card numbers. 
But unwieldy or confusing site design also 
accounts for many of the abandoned carts. 
Businesses that ask consumers to fill out 
forms face bailouts as well. “We’re interested 
in how far someone gets through our appli- 


cation before they abandon it,” says Mark 
Lawrence, IT director and chief privacy 
officer at CompuCredit Corp., an Atlanta- 
based credit card company. “We want to 
know where they abandoned it and why.” 

When Hoover’s Inc. in Austin, Texas, 
launched a channel devoted to travel, the 
online research company was surprised at the 
new page’s worse-than-anticipated perfor- 
mance. When promoting the new channel, 
“what we thought would work was buttons on 
the home page,” says Craig Lakey, Hoover’s 
vice president of marketing. “We found out 
they were coming from other areas.” 

Hoover’s used Essentials, an analysis tool 
from Personify Inc. in San Francisco, to deter- 
mine that the home-page promotion was being 
wasted because 80% of the company’s traffic 
entered its site through other pages. Hoover's 
shifted its travel-channel promotion to other 
areas of the main site — and more than dou- 
bled its travel-page views, Lakey says. 


Determine Whose Job It Is 

The first critical task in 2001 regarding 
clickstream data is deciding who should own 
the process. Some experts believe that market- 
ing, as the primary user of Web-derived cus- 
tomer data, should own the analysis process, 
but it will likely be your IT department that’s 
charged with collecting that data. 

According to a recent report from Jupiter 
Research Inc. in New York, usage analysis 
should be performed by those who are most 
likely to use the information. “While IT re- 
sources are certainly necessary,” the report 
says, “the IT group is too far removed from 
the business goals of usage analysis.” 

The IT leaders interviewed for this story 
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PLUMB YOUR 


paint their clickstream data-analysis function 
as an equal partnership between marketing 
and IT. The marketing folks set the vision, de- 
ciding where the business needs to go and 
what information must be gathered and under- 
stood in order to get there. IT’s role is to im- 
plement their vision. 

For example, Kurt Schlicher, a systems ar- 
chitect in the Internet group at Dodgeville, 
Wis.-based retailer Lands’ End Inc., says his 
department has customized its copy of Insight, 
a data collection and analysis tool from Fre- 
mont, Calif.-based Accrue Software Inc. 

“Basically, we have a number of reports the 
marketing department uses,” Schlicher says 
“We've modified [Insight] to understand our 
cookie formats and page-naming convention.” 


Decide Whether to Outsource 

The two biggest difficulties in effectively 
analyzing clickstream data, analysts say, are 
having too much information and not enough 
people to analyze it. It’s no secret that the 
amount of customer data available from busi- 
nesses’ Web sites continues to increase. These 
days, “the larger sites pull in several gigabytes 
a day,” says Wheelhouse’s Cameron. “Maybe 
terabytes.” 

Meanwhile, the Jupiter survey found that 53% 
of Web businesses had less than one full-time 
employee devoted to data collection and analy- 
sis, and 23% had no one assigned to the job. 

It should come as no surprise, then, that 
outsourcing data collection and analysis is 
gaining popularity. “As sites grow, they’re just 
faced with overwhelming data,” says Peter 
Marino, a Jupiter analyst. “Outsourcing takes 
that off their plate.” 

Gathering, never mind analyzing, click- 
stream data is “Priority 6 or 7 [for overworked 
IT departments], so it never happens,” says 
Usama Fayyad, CEO of digiMine Inc., a 
Kirkland, Wash.-based company that uses a 
service-provider model to deliver data ware- 
housing and analysis. 

Of course, when you outsource any data- 
related function — collection, analysis or even 
storage — you give a third party access to in- 
formation. And when this information is cus- 
tomer-related, you're playing with fire. 

Marino says he’s spoken with several finan- 
cial services companies that have resisted 
outsourcing their data collection and analysis 
for just that reason. “It’s a big stumbling 
block,” he says, but it can be overcome 
through careful selection of part- 
ners and rigorous application of 
standard security and privacy 
practices. 


Create a Full Picture 


In 2001, leading organizations 
will seek to do a better job merg- 
ing clickstream data with infor- 
mation from other sources to 
form a richer picture of cus- 
tomers. The clickstream is fine, 
analysts say, but its use is limited 
if it stands alone. The wave of the 
future is an integrated data-snap- 
shot of a customer that includes 
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Wheelhouse Corp. 


clickstream data; previous purchases, if any, 
not only from the Web site but from other 
channels; the consumer’s customer service 
history; and demographic data. 

That 360-degree view of customers and po- 
tential customers should be a high priority in 
the year ahead. Automobile parts retailer JC 
Whitney Inc. currently uses tools from Port- 
land, Ore.-based WebTrends Corp. to track 
only high-level customer data such as the 
make and model of cars, according to Bruno 
Brunetti, the Chicago-based company’s direc- 
tor of Internet development and operations. 
But JC Whitney is barely using WebTrends’ 
capabilities. 

Next year, Brunetti says, “we’re going to 
try to understand customer behavior more to 
enhance the user experience.” That means 
collecting more granular clickstream data 
and combining it with information from other 
sources. 

At Hoover’s, the challenge is to evolve the 
present data-analysis function into “more of a 
[customer relationship management] platform 
for a fuller view of the customer,” Lakey says. 
Hoover’s plans to use Proactive, a Personify 
profiling application, to import demographic 
data on customers and prospects. 


Choose Your Privacy Path 
Hand-in-glove with the data gathering and 
analysis problem is the privacy question. This 
past year, the number of corporate embarrass- 

ments caused by inadvertently exposed cus- 
tomer data skyrocketed. It’s become such a 
concern that many businesses have appointed 
a chief privacy officer to set policy, educate 
employees and ensure that proposed business 
deals don’t risk privacy breaches. 

Arabella Hallawell, a senior analyst at Stam- 
ford, Conn.-based Gartner Group Inc., warns 
that in 200], “customer information data-shar- 
ing is going to be a big problem [for] enter- 
prises,” because of the increasing amount of 
information shared with service providers and 
because of the “extended relationships in the 
supply chain.” 

Experts say you need to make a choice: Do 
you obey the letter of privacy laws, primarily 
to limit corporate liability? Or do you “take the 
high road,” as Hallawell puts it, and establish 
tougher policies than required? Regardless of 
which path you choose, somebody in the bus- 
iness — usually legal counsel, but sometimes 
a chief privacy officer or CIO — must stay 

current on the array of privacy- 
related laws and regulations that 
are pouring forth from the federal 
and state legislatures. 

It’s worth remembering that 
taking the high road may actually 
provide a competitive advantage 
in some businesses, particularly 
those that are consumer-oriented. 
“If customers don’t trust you,” 
Hallawell says, “they don’t want 
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you to know them better.” # 





Ulfelder is a freelance writer 
in Southboro, Mass. He can be 
reached at sulfelder@charter.net. 
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Web Content 


BY MICHAEL MEEHAN 


WEB SITE WITH no e-mail 
capability and no banner ads? 
At first glance, it might not 
spark much interest in the 
business community, but that 
model has turned into a bil- 
lion-dollar baby for Southwest 
Airlines Inc. 

In August, the discount carrier became the 
first airline to crack $1 billion in ticket revenue 
on its branded Web site. It has done so with 
perhaps the simplest formula in the trade: The 
Dallas-based carrier doesn’t seek to create 
new revenue streams or develop new types of 
business partnerships through its online oper- 
ation; it sells tickets, keeps things simple and 
makes money. 

“It is a low-cost distribution channel for 
Southwest,” says Melanie Stillings, a marketing 
automations manager at the airline. “It costs 
us about $1 to book online. It costs us about 
$10 to book through a travel agency. What we 
try to avoid is spending ungodly amounts of 
money on an Internet product if it’s going to 
the raise the price of our tickets.” 

Southwest is typical of businesses that will 
use the Internet in the coming year as a low- 
cost channel to streamline sales, not just as a 
reason to launch ad campaigns or a way to 
build brand recognition. The mandate for IT 
in 2001? Use the Internet to build a reliable 
customer base. 


Keep It Simple 

Southwest began selling tickets online in 
early 1996, and despite not having an e-mail 
button on its site, the airline has managed to 
keep its brick-and-mortar reputation for cus 
tomer service. 

“If people need customer service, we want 
to do it right,” Stillings says. “We want to give 
theim an answer and a live person, not a wall. 
Airlines are still a people business.” 

Southwest has also forgone the banner 
advertisements that are common on many 
Web pages. Stillings says the company isn’t 
interested in bogging down its Web page 

vith peripheral information. Southwest 
wants the page to load quickly and custo- 
mers to get the information they want with 
relative ease, she says. 

“We get a lot of comments about [not hav- 
ing] bells and whistles and the latest wireless 
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Melanie Stillings, Southwest Airlines 


technology,” Stillings says. “Our customers 
want cheap airline tickets, and we'd be in trou- 
ble if we lost track of that.” 


Start Small 


As many Internet businesses have learned, 
you must establish a workable supply chain 
and reliable customer service before expand- 
ing. Many of the latest entrants to the Web 
arena have decided that they would rather 
take the mom-and-pop-store approach and 
expand after they’ve enjoyed some success. 

Atlanta-based The Home Depot Inc. went 
online in August but decided to start small, 
Web-enabling only its six stores in Las Vegas 
and making them the fulfillment centers for 
the company’s line of more than 40,000 prod- 
ucts. Online shoppers in that region can either 
pick up their purchases at one of the stores or 
have the items delivered by Home Depot or 
UPS directly to a job site. 

Depending on the success of the Las Vegas 
rollout, Home Depot will launch similar on- 
line sales programs in San Antonio and Austin, 
Texas, before the end of 2001. 

Home Depot spokesman Jerry Shields says 
the Web site will keep track of each Las Vegas 
store’s inventory in real time. The company 
will then replicate that model for each new 
region it develops, he says. 


Educate Your Customer 

Brian Sugar, chief Web officer at BlueLight.- 
com LLC in San Francisco, says his company 
has prepared itself for the next wave of Web 
customers — those who aren't PC savvy. Blue- 


Light was founded in December 1999 by Troy- 
Mich.-based Kmart Corp. and Tokyo-based 
Softbank Corp. and was designed to succeed 
where Kmart.com failed. 

BlueLight decided that it needed to offer 
more than Kmart’s product line to make a 
splash on the Web. Specifically, it began offer- 
ing free Internet access through a partnership 
with Yahoo Inc. in Santa Clara, Calif. Though 
its model is more complex than Southwest’s 
proposition, BlueLight believes it needs to cre- 
ate a unique market to make money in the re- 
tail world, where profit margins are low. 

More than 1 million customers have signed 
on for the service, many of them Internet 
neophytes. Yahoo acts as their Internet ser- 
vice provider, while BlueLight runs pervasive 
advertising. The hope is that customers will 
think of BlueLight whenever they need to 
make a purchase. 

“You really target Mom, who is the Kmart 
shopper,” Sugar says. “Anything we can do to 
make buying online easier or more direct for 
Mom, we'll do it.” 

BlueLight is also selling its own branded low- 
price PCs — another initiative to increase the 
Web savvy of its potential shoppers. “It’s all an 
effort to bring customers to us,” Sugar says. 

BlueLight claims it can reach profitability 
by the end of 2001 — an awfully quick turn- 
around in Internet time. But Sugar says that 
the money-burning days of Internet business- 
es have ended and that investors want to put 
their cash into moneymakers. “You don’t 
spend X millions on a football ad or something 
that isn’t tied to sales,” he says. “You leverage 
your brick-and-mortar strength. You make 
sure what they buy you can ship to them, and 
make sure you ship it to them on time.” 

Sugar also emphasizes hiring staff who know 
what they're doing. BlueLight has 125 employ- 
ees, most of whom were culled from other suc- 
cessful Web operations or technical giants like 
Sun Microsystems Inc. and Microsoft Corp. 

At Southwest, its technical Web crew is 
housed inside the company’s marketing de- 
partment. Stillings says Southwest wants those 
two groups to work in harmony. 

“We do all of our work on Southwest.com 
in-house,” she says. “This is not just some 
technical offshoot of our business. It is our 


. 


business.” 


Checklist 


@ Keep the content simple and inexpensive 
to produce if you intend to make money. 


@ Make it fast. Simplicity also means faster 
page loads. 


@ Offer your best deals online to motivate 
customers to shop there. 
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Office Depot’s Mike Kirschner says inconsistent XML standards are 


tegration 


BY CAROL SLIWA 


E PREPARED to learn some of the 
finer points of middleware and 
XML if you’re plotting an archi- 
tecture to help your company 
participate in one or more of 
the business-to-business mar- 
ketplaces that industry watch- 
ers predict will flourish in 2001. 

Once you've built an on-ramp to a market- 
place, one of the key challenges will be inte- 
grating data into the back-end applications 
that need to use it. That’s where middleware 
can provide a crucial assist in translating, rout- 
ing and securely delivering data and where 
XML-based messaging can make it easier to 
cope with data in widely varying formats. 

But technology is only part of the equation, 
analysts warn. Before you start to think about 
software, your company will need to examine 
its business processes and trading-partner 
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relationships to figure out which ones will be 
affected and improved by the marketplace. 
Then you'll need to identify all of the applica- 
tions and databases involved, because that in- 
formation will affect the architecture deci- 
sions that have to be made 

While all that may sound straightforward, 
the work can get complicated, particularly at 
big firms. Several departments may have their 
own systems. The situation can become even 
more complex if there have been mergers. 

Simon Yates, an analyst at Forrester Re- 
search Inc. in Cambridge, Mass., says he 
recalls one large company that had several 
competing integration projects going on in 
different business units, “and it was essentially 
a race to see who could get their project done 
first.” The strategy was to “force-feed” the 
winner’s solution onto the others. 

“It’s extremely difficult to get everybody on 
the same page. But it will save lots of compa- 
nies time and wasted manpower if they build a 


general-purpose infrastructure across the 
company and pick vendors whose software is 
adaptable to future needs, regardless of busi- 
ness unit,” Yates says, cautioning, “It’s easier 
said than done.” 


Form a Multidisciplined Team 

You can better organize that effort by form- 
ing a full-time central team with enterprise- 
wide and cross-enterprise scope to develop, 
deploy and maintain the integration infra- 
structure, advises Roy Schulte, an analyst at 
Gartner Group Inc. in Stamford, Conn. 

The team will have to carefully assess the 
current infrastructure and plan for any addi- 
tional software that may be needed. It’ll get a 
head start if there’s already a flexible, multitier 
architecture in place, with presentation, busi- 
ness-logic and database layers. 

United Parcel Service of America Inc., for 
instance, unknowingly laid the foundation for 
future Web endeavors seven years ago when it 





“what causes us t 


most pain.” 


built custom middleware, running on an IBM 
AS/400 server farm, for a new client/server 
customer service initiative. IT staffers identi- 
fied all the legacy applications and databases 
that would be needed and created a standard 
interface specification and message format for 
those applications, says Mark Hilbush, an 
Internet systems manager at UPS. 
Atlanta-based UPS later adapted that infra- 
structure, adding Web and application server 
tiers, to launch the Web site customers now 
use to track their packages. That infrastruc- 
ture could be modified further to connect to 
other presentation layers, including business- 
to-business marketplaces, Hilbush says. 


Assess Existing Infrastructure 
The messier and tougher job is back-end in- 
tegration. Rick Hebert, a senior architect at 
NerveWire Inc., a consultancy in Newton, 
Mass., says clients have typically approached 
application integration in the following ways: 
g By building and designing a point-to-point 
integration system to “hard-wire” applications 
to talk with one another. “It’s a very complex 
environment to manage,” Hebert says. 
w By enlisting message-oriented middleware 
such as IBM’s MQSeries or Palo Alto, Calif.- 
based Tibco Software Inc.’s Rendezvous. An 
application is connected to a message bus that 
manages communication between programs, 
which may be running on different operating 
systems. The downside is that data translation 


between applications, as well as transaction 
management, still must be done, Hebert notes. 
wg By using enterprise application integration 
(EAD tools, many of which have been im- 
proved to handle a wide range of functions, 
including guaranteed delivery of messages 
between applications, transaction manage- 
ment, data translation and security. 

Such middleware helps with external busi- 
ness-to-business integration and internal ap- 
plication-to-application integration. With this 
approach, each application and its integration 
characteristics are defined once in a metadata 


repository, Hebert says. “Using these EAI tools, 


we basically design the system once, and then 
we can tie into a number of marketplaces with 
very little custom work for each one,” he says. 

Companies, in turn, can check their trading 
partners’ preferred means of e-commerce on 
the evolving Universal Description, Discovery 
and Integration Business Registry. 

Vendors of integration middleware include 
Tibco, Extricity Inc., Neon Systems Inc., Vitria 
Technology Inc. and webMethods Inc. Micro- 
soft Corp. aims to compete with its BizTalk 
Server, and IBM offers MQSeries Integrator. 

While those products remove a good por- 
tion of the design and build work that devel- 
opers used to do from scratch, Hebert says, 
“they're not silver bullets.” Be prepared for a 
lot of analysis and design work, he cautions. 

Some companies may decide not to use all 
of an EAI product’s capabilities and may in- 
stead opt to use adapter code to connect to 
middleware they already have in place. 

Eastman Chemical Co. in Kingsport, Tenn., 
has been processing more than 65,000 elec- 
tronic data interchange (EDI) transactions per 
month with more than 400 trading partners. 
Now that it needs to deal with some partners 
using XML, Eastman has enlisted middleware 
from Fairfax, Va.-based webMethods to trans- 
late messages to XML and deliver them se- 
curely and reliably, says Bill Graham, head of 
Eastman’s Integrated Direct effort. 

Graham acknowledges that webMethods, 
through its acquisition of Active Software Inc., 
can provide the internal EAI engine that his 
company needs, in addition to the external 
capabilities it’s using. But, he says, Eastman 
Chemical was “already down the path” inter- 


Checklist 


@ Examine existing business processes and 
trading partner relationships with an eye 
toward improvement 


@ Build a general-purpose infrastructure 
across your company and pick vendors 
whose software is adaptable to future needs. 


@ Forma team to develop, deploy and main- 
tain the integration infrastructure. 


nally with MQSeries and plans to stick with 
IBM’s product for sending messages to the 
SAP R/3 system it’s installing to replace R/2. 

Neither the webMethods nor the MQSeries 
middleware eliminated all the work. IT 
staffers chose to build adapter code to link 
MQSeries to R/3 because they deemed that 
the prebuilt adapters on the market were too 
expensive for the functionality they needed. 

One way to off-load part of the overall work 
is to join a marketplace. Sears, Roebuck and 
Co. in Hoffman Estates, IIl., has 30 to 35 main- 
frame applications that use EDI-formatted 
files. IBM, which hosts and maintains the 
Sears system, translates the transaction files 
and transmits and loads them in batch mode 
into the mainframe applications, explains IT 
resource manager Pamela Cox. 

That back-end system didn’t change when 
Sears joined San Francisco-based GlobalNet- 
Xchange LLC’s (GNX) marketplace. IBM sim- 
ply routed the EDI transactions to a middle- 
ware server from Cyclone Commerce Inc. in 
Scottsdale, Ariz., that Sears installed for secu- 
rity. The messages then go from the Cyclone 
server to GNX, which translates them into the 
format in which Sears’ trading partners need 
to receive them and then delivers them. 

Over time, says Cox, Sears will write new 
applications that will generate and accept the 
more neutral and flexible XML format. But “it 
will take a long time before the EDI files will 
be gone,” Cox predicts. “Some are very old 
legacy applications that are working fine.” 

GNX won't push them. Gerry Palmer, chief 
technical officer at GNX, says the exchange is 
“very agnostic about EDI vs. XML.” Palmer 
says he sees the benefits of XML for handling 
rich message content. But he says he also rec- 
ognizes members’ huge investment in EDI, not 
to mention the increased processing power 
and bandwidth needed for XML files, which 
can be five to 10 times larger than EDI files. 


Evaluate XML Standards 


Some analysts say those concerns are un- 
founded because bandwidth and disk space 
are plentiful. But that’s not the only potential 
hurdle with XML. In the absence of XML stan- 
dards, vendors and vertical industry groups 
have tried to define purchase orders, invoices 
and other important business documents. 
That has forced many companies to support 
many different XML document types. 

Office Depot Inc. in Delray Beach, Fla., for 
instance, supports Ariba Inc.’s Commerce 
XML (CXML), Commerce One Inc.’s Common 
Business Language (CBL), Datastream Sys- 
tems Inc.’s iProcure network, standards from 
the Open Buying on the Internet Consortium, 
and XML interfaces developed in-house. 

Problems surface when firms implement the 
same CXML or CBL document differently. One 
customer might put a shipping or department 
field in a different place than another customer 
would, says Mike Kirschner, vice president of 
e-commerce development at Office Depot. 

“We have to support inconsistent standards, 
and that’s what causes us the most pain,” says 
Kirschner. “If you look at EDI, the reason it’s 
successful, they figured all that stuff out.” + 
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John Sullivan, head of human resources at San Francisco State University, advises businesses to make recruiting a cross-company affair: “Everyone sells the company.” 
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BY DAWNE SHAND 


OOKING TO HIRE? Kevin might be 
available. He recently jumped 
ship from an e-commerce con- 
sulting firm. As a top-notch Java 
programmer, Kevin worked on 
complex Web projects for both 
dot-com and Fortune 500 clients. 
But he tired of the workload pen- 
dulum, which swung violently between 20- and 
100-hour workweeks with no additional com- 
pensation. To add insult to injury, Kevin had to 
rewrite Java code for a contractor who had 
earned $300,000 in six months, while Kevin 
earned far less. Few on his project team under- 
stood (never mind appreciated) what it means 
to be a skilled computer engineer. 

So Kevin and a fellow engineer have decid- 
ed to start their own firm. They don’t want to 
work through an agency, because work is plen- 
tiful. They just want to do quality software 
engineering and have time left over to snow- 
board this winter. 

How do you lure someone like Kevin? That 
depends. Do you know your company’s future 
needs? And do you have a strategy for finding 
those skills or developing them in-house? To 
help you answer those questions, we gathered 
some tips from recruitment experts. 


Know Your Skills Needs 


Michael McNeal, co-founder of PureCarbon 
Inc., an application service provider in Scotts 
Valley, Calif., was formerly head of employee 
development at Cisco Systems Inc. in San Jose. 
While at Cisco (which has an attrition rate of 
just 7%), McNeal took the company from 
4,800 employees to 30,000. Now a recruitment 
consultant, he tells companies to develop a 
hiring strategy that links business needs with 
workforce planning. McNeal says you should 
think carefully about what your business will 
look like, identify the workforce’s current 
strengths and weaknesses, and figure out what 
gaps could appear in the future. 

And remember: There’s no point in recruit- 
ing successfully if employees don’t stay. These 
days, retaining talent involves careful atten- 
tion to individual skills development. More 
and more, managers rank the ability to help 
employees develop new technical skills as a 
high priority. For that, you'll need the exper- 
tise of your human resources department. 


Be a Free-Agent Scout 

Once you know what your company needs, 
decide the best way to find the right people. 
The perfect candidate might be working at an 
obscure firm or as an independent contractor. 
Or the best person for the job could be the 
neighbor of the administrative assistant in the 
IT department, or the competitor who visited 
your booth at the Comdex show. To find these 
people, communicate your recruiting strategy 
to the entire company and form partnerships 
with other departments, such as human re- 
sources and marketing. Successful recruiting 
involves the whole organization. 

The current rage in recruiting is to poach 
dot-com talent, but those folks may not be a 


THE BEST 


‘Talent 


good cultural fit for your company. They may 
have been drawn to a dot-com by the promise 
of riches, and your company may not be will- 
ing or able to meet their demands. And dot- 
coms rarely have training programs that keep 
employees’ technical skills current. 

And if you decide to pursue employees who 
have been displaced by tanking Web ventures, 
you'll find that those candidates aren’t as plen- 
tiful as you might have heard: A recent report 
by Chicago-based outplacement firm Chal- 
lenger, Gray & Christmas Inc. notes that in the 
first nine months of 2000, Web companies laid 
off 16,289 people, compared with 392,296 in 
traditional business sectors. 

So again, remember what McNeal has 
learned: Strategy is key. Know what skills, 
expertise and competencies you require be- 
fore phoning the latest failing dot-com. 

Kevin’s experience speaks volumes for to- 


Checklist 


@ Make everyone a recruiter. Everyone at 
your company should know the number 
and type of recruits needed. 


@ Recruit all the time. If you don't, you'll 
miss candidates and the company will 
look vulnerable. 


@ Close deals fast. Compaiies that are 
prompt decision-maker? are more likely 
to land the best recruits 


day’s recruiting manager. The exodus from the 
stiflingly large corporate environment to the 
perceived autonomy of the small firm or dot- 
com has dispersed talent. Self-employment 
has blossomed, too, which means these poten- 
tial employees will be even harder to find. 

To complicate matters, there has been a sub- 
tle shift from dependency on placement firms, 
notes John Rossheim, who coaches free agents 
from his home in Rhode Island. “Some of the 
best [talent] are going the free-agent way,” he 
says. Their reasons are much like Kevin's: the 
desire to be compensated appropriately for 
hours worked and to have more autonomy. 

Rossheim says these people are reluctant to 
hand over a large chunk of their fees to place- 
ment agencies. So for managers, hiring directly 
can mean lower overall costs but more time 
invested in locating candidates. 

Because marketing yourself as an indepen- 
dent contractor is tough, many free agents are 
underemployed. Smart managers should seize 
that opportunity and incorporate free agents 
into their workforce, says Daniel Pink in 
Washington, who has been observing and re- 
searching the free-agent phenomenon and is 
author of The Free-Agent Nation (Warner 
Books, March 2001). 

Pink’s assessment: “Getting work for free 
agents is really hard. The need for connection 
is greater, not less.” These free agents may 
even revert back to the corporate world, given 
the right environment. So start scouting now. 


Make Everyone a Recruiter 

John Sullivan, professor and head of human 
resources at San Francisco State University, 
offers this summation: “Everyone sells the 
company.” Sullivan lectures on recruiting and 
recently returned from a leave of absence 
during which he served as chief talent officer 

Best Talent, page S30 
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Continued from page $27 
at Agilent Technologies Inc., a division of 
Hewlett-Packard Co. in Palo Alto, Calif. 

Recruiting is selling, he says, and it’s every- 
one’s business. Recruiters can’t effectively sell 
savvy technologists, because they don’t really 
know the technology. Instead, managers have 
to own that process. 

At Agilent, Sullivan employed the “open- 
house” model. Agilent wasn’t as well-known 
as its parent company and therefore couldn't 
bank on the appeal of brand or traditions 
to lure talented workers. But once Agilent 
opened its doors, “the tradition, culture and 
values came through,” says Sullivan. Coupled 
with on-the-spot job offers, open houses can 
work wonders. 

Both Sullivan and McNeal are big believers 
in employee-referral programs. People recruit- 
ed by referrals stay longer and perform better, 
says Sullivan, and it’s the cheapest method of 
recruiting. He adds a twist: Don’t stop at offer- 
ing a one-time incentive for the referring em- 
ployee — throw in an extra bonus based on 
the performance of the new hire. 

Sound too radical? Here’s another savvy 
sales technique: Step aside and let the big boss 
deliver the job offer. Definitely don’t send the 
recruiter to close the deal; it makes the man- 
ager look disinterested. 

And about those help-wanted ads: Sullivan 
says advertisements for job openings should 
follow good press. If a magazine writes posi- 
tively about your company and why it’s a great 
place to work, then advertise for job openings 
in that issue. More people will pay attention to 
an ad that follows a great story than to an ad 
that’s buried in a help-wanted section. 


Know How to Market 
Although highly encouraged by top recruit- 
ers, stealing talent from competitors is proba 
bly insufficient, as companies have become 
more aggressive about retaining employees. 
“Being competitive isn’t enough,” says Jim 
Kochanski, head of Sibson & Co.’s talent man- 
agement practice in Raleigh, N.C. “Companies 
need to have a distinctive quality.” That might 
mean being family-friendly, for example, by 
providing comprehensive health benefits and 
flexible hours. The company then becomes a 
talent magnet for those who think that’s im- 
portant. Therefore, defining and enforcing the 
qualities that make your company special be- 
comes the cornerstone of a recruiting effort. 
Many novel recruiting ideas are taken from 
marketing’s playbook. McNeal recalls a ball- 
bearing company that created a product with a 
few mechanical qualities that were appealing 
to the scientific community. He advised the 
company to start a newsletter rather than 
build an employment Web site. He suggested 
that the company advertise the newsletter to 
scientists who would have an interest in the 
technology, provide free subscriptions and 
then mine the list of readers for recruits. 
Recruit subscribers of a newsletter pub- 
lication? Newsletters build reputations; they’re 
a marketing tool. Recruiting, much like direct 
marketing, is about getting the best targeted 
list of names. 


Sullivan: Recruiting is selling, and it’s everyone’s business. 


Cisco takes this a step further and uses 
demographic data. McNeal says he made a 
point of setting up recruiting booths at events 
where the demographics matched the inter- 
ests of the company’s existing workforce. No 
one expected Cisco to appear at a home and 
garden show or an international beer festival 
— including its competitors. 

IT managers must also do some counter- 
intelligence work. Kochanski says his clients 
are finding that many recruits get cold feet 
after giving their notice because their employ- 
ers often make counteroffers. He says he has 
also noticed the growing trend of people stay- 
ing in a new job for only a week before being 
lured back by a former employer. 

Kochanski advises clients to stay in continu- 
al communication with recruits once an offer 
has been extended. Check in to make sure 
everything is OK and reassure them that their 
decision was a good one. Don’t give recruits a 
reason to change their minds. 

Also, once new employees get settled, ask 
them to recruit former colleagues. They, too, 
can be useful spies. Just because one depart- 
ment has filled its quota, that doesn’t mean a 
manager down the hall isn’t short-handed. 

Here’s another piece of advice: Make job 
descriptions sing. Every top recruiter has a 
beef with standard job descriptions, which are 
often poorly written and sound dull. How 
many people pass over an employment Web 
site because the job descriptions lack appeal? 
So behave like an editor: Find good writers, 
ask for zip in descriptions and edit lightly. 

And remember, it takes more than one indi- 
vidual’s efforts to find good employees. Follow 
these tips and recruiting becomes a collabora- 
tive effort of the whole organization. + 





Shand is a freelance writer in Arlington, Mass. 
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“Malware’—viruses, spam, and other 
malicious code or content, like the notorious 
“Love Bug” outbreak—can invade your 
network, clog your servers, and cripple your 
system. But you've got a defense: ScanMail 
for Lotus Notes; from Trend Micro. 


ScanMail keeps viruses out of your 
Lotus Notes/Domino environment, and 


stops viruses from using your groupware 


servers as a distribution mechanism. It 
detects and eradicates viruses in real time, 
scanning email attachments at the mail 
router and scanning databases during 
replication or on demand. 


ScanMail provides complete support for 
Lotus Domino R35, including multiple 
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Trend Micro products, ScanMail enables 
uniform enterprise-wide content security 
enforcement, managed through a single 
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Hewitt’s Dan Kaberon: “The real challenge is to provide continuous application availability.” 


RETOOL YOUR 


Data Center 


BY JAIKUMAR VIJAYAN 


RANSFORMING A DATA CENTER 
for e-business is almost like re- 
building a 747 while it’s flying. But 
it’s a challenge you may have to 
face this year as more companies 
move their businesses to the Web. 
“Given that the whole world is 
webifying everything at a million 
miles an hour,” companies have no option but 
to keep pace, says Dan Kaberon, Parallel Sys- 
plex manager at human resources outsourcer 
Hewitt Associates LLC in Lincolnshire, Ill. 
“The real challenge is to provide continuous 
application availability while changing every- 
thing around you.” 

The massive growth of e-business applica- 
tions has already driven fundamental changes 
in the data center, which is now larger, more 
complex and more heterogeneous than ever 
before. Data centers are quickly evolving from 
silolike environments that host separate appli- 
cation islands to multivendor operations cen- 
ters that feature a slew of tightly integrated yet 
function-specific host-based, Web, database, 
application and storage resources. 

And there will be a lot more of these opera- 
tions centers going live this year as companies 
scramble to set up new facilities to address the 
growing need for around-the-clock availability 
throughout the year, says Carl Greiner, an ana- 
lyst at Meta Group Inc. in Stamford, Conn. 


“What you are seeing is companies trying to 
distribute work through the network into two 
centers that are both hot and can absorb the 
work of the other” in a failure, Greiner says. 
Such redundancy is being repeated across net- 


works, hardware and core applications, he adds. 


Mainframes are also moving from hosting 
mainly platform-specific legacy applications to 
supporting newer, distributed applications like 
enterprise resource planning, customer rela- 
tionship management and e-commerce. 

Where data centers of the past used to be 
tied together via internally controlled private 
and leased networks, the trend is toward ex- 
ternally managed virtual-private-network- and 
Internet-based connectivity. And where there 
was little interconnection among applications 
serving different enterprise divisions, the fo- 
cus is almost totally on melding applications 
— and access to them — across the enterprise 
and outside of it. 

Not surprisingly, the task of managing the 
environment has also inexorably grown, says 
Adolf Barclift, a senior vice president of infor- 
mation services at Metris Co., a Minnetonka, 
Minn.-based financial services firm. 

“The ‘new world’ data center is a network- 
centric information center that puts external 
customers first in the priority line,” says David 
Floyer, vice president of ITCentrix Inc., a con- 
sultancy in Mountain View, Calif. “[It] central- 
ly manages both internally and externally con- 
nected resources, using the acceptance of In- 


ternet Protocol as a catalyst for common com- 
munications across IT boundaries.” 

Maintaining the availability of current lega- 
cy and batch applications is only one part of 
the challenge, says Barclift. Increasingly, it’s 
also about understanding business objectives 
and knowing how to manage interconnected 
applications and processes. 

“From a process point of view, things are a 
lot more complicated,” Barclift says. “If you 
look at an e-commerce environment, a trans- 
action might have to pass through multiple en- 
vironments, some of which you don’t even 
have control over.” 


Know Your Business Model 

The most fundamental way to ease the tran- 
sition is to get a better understanding of your 
business model, customer needs and how 
applications interact with one another in a 
Web-enabled world. 

Have an architecture that lets administra- 
tors add, remove, test or repair hardware and 
software — without taking down the complex. 
Break large applications into smaller compo- 
nents, if possible, and distribute them across 
multiple resources to minimize the conse- 
quences of a software or hardware breakdown 

Remember that availability is key — but it 
isn’t necessary or even feasible to make every 
application continuously available. Instead, 
prioritize applications according to their im- 
portance to your business. Mirror everything, 
especially the applications that simply can’t 
go down. Make sure there are adequate high- 
availability and backup measures for every- 
thing else. And plan for ample capacity — scal- 
ability is almost as important as availability. 

In an environment where time-to-market is 
vital, forget the big-bang software and hard- 
ware rollout. Upgrade in increments, if possi- 
ble. Buy off-the-shelf software and layer any 
needed customization on top of that. It’s also 
key to have a central point of technical and 
end-to-end management control. 

“IT organizations face enormous pressure to 
create new transaction systems that integrate 
with legacy information to enable online buy- 
ing, best-in-class customer service and seam- 
less partner connection,” Floyer says. “To 
respond, companies must completely revo- 
lutionize their management approach.” + 


Checklist 


@ Pian for scalability. Be ready to add 
capacity quickly. 


@ Distribute workloads. Buy off the shelf 
where possible; outsource if needed. 


@ Application uptime is key — build in lots 
of redundancy. 
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BY DEBORAH RADCLIFF 


ISTRIBUTED DENIAL-OF-SERVICE 
attacks, self-replicating e-mail 
viruses, electronic security in- 
surance, outsourcing: These 
are just a few of the myriad is- 
sues that landed on your infor- 
mation security manager’s 
watch list last year, and even 
more are expected to arrive in 2001. 

Your chief security officer faces so many 
new issues, in fact, that we polled 35 security 
vice presidents, officers and managers to de- 
termine the top 10 hot spots (see chart, page 
39). We conducted our informal polling in 
October at the SANS Institute’s Network Se- 
curity 2000 conference in Monterey, Calif. 

Your security officer’s to-do list is loaded: 
Comply with new security and privacy regula- 
tions in health care and finance; develop 
stronger user-awareness policies; and address 
more security issues, thanks to the growth of 
wireless access, business-to-business exchanges 
and application service providers (ASP). 

But there is a silver lining: Nearly ali the 
security officers we spoke with said they agree 
that this year’s No. 1 issue — the adoption of 
international security standards — just might 
simplify some of these complexities. 
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Checklist 


Put together a security team to get up to 
speed on HIPAA and Gramm-Leach-Bliley 
Act requirements. 

List your company’s top vulnerabilities 
and look at critical applications to deter- 
mine risk levels 

Develop stronger user-awareness policies. 
Teach users to protect confidentiality. 

Get involved. Join a working group that's 
helping to draft international security 
standards. 


Make Employees Aware 

It took self-replicating viruses and distrib- 
uted denial-of-service attacks to get users 
thinking about security during the past year, 
says Pete van de Gohm, director of informa- 
tion asset protection at Enron Energy Services 


Inc., a subsidiary of Enron Corp. in Houston. 

But security managers still have a lot more 
work ahead of them: Threats from internal 
employees account for nearly 40% of all secu- 
rity breaches, according to a joint survey of 
273 organizations that was released last March 
by the San Francisco-based Computer Security 
Institute and the FBI. 

The problem is exacerbated by high em- 
ployee turnover, adds Paul Raines, vice presi- 
dent of information asset protection at the 
Federal Reserve Bank of New York. 

The key to surviving these increasingly 
complex attacks will be creating security 
awareness campaigns. These programs should 
cover three areas: access-control management, 
root (Unix) and administrative (Windows NT) 
access, and information handling by both per- 
manent and temporary employees, Raines says. 

Keep these policies simple, follow up with 
refreshers and use media coverage of security 
events to keep the issue on users’ minds, adds 
Michele Guel, a security engineer at Cisco 
Systems Inc. in San Jose. 

“We're getting there, in terms of teaching 
our user bases to protect confidentiality,” van 
de Gohm says. “The test this year will be to 
raise awareness with more creative viruses 
and Trojan [horses] than Melissa and ‘I Love 
You’ to fuel [user-assisted breaches].” 





“The industry . . . still has a long way to go to enable true e-commerce,” says Marriott’s Jerry Dixon. 


Create a Mobile Policy 

User policies must also cover remote access, 
especially considering the prediction of 55.4 
million mobile workers by 2004 by Framing- 
ham, Mass.-based IDC. 

“Mobile workers and wireless connectivity 
to your entire network opens a giant security 
hole,” says Ruth Lestina, regional practice lead 
for information security consulting at network 
infrastructure consulting firm Predictive Sys- 
tems Inc. in New York. 

Some 38% of 300 security professionals re- 
ported break-in attempts through remote sys- 
tems last September alone, according to an 
October survey conducted by Cupertino, 
Calif.-based security vendor Symantec Corp. 
Yet only 15% of those companies use a desktop 
firewall for remote workers. For this reason, 
desktop firewall systems from vendors like 
Zone Labs Inc., Network Ice Corp., Network-l 
Security Solutions Inc., Network Flight 
Recorder Inc. and Symantec will be big sellers. 

“You'd be surprised how many firewalls 
we're selling in the enterprise,” says Avi Fogel, 
president and CEO of Waltham, Mass.-based 
Network-l. 

Wireless devices are more problematic than 
any other type of mobile equipment. This past 
year, one Trojan horse and two virus threats 
against PalmPilots and cell phones, along with 


a report of a virus found in a German cellular 
network, were published, although none 
proved serious. In September, Symantec intro- 
duced antivirus software for the Palm operat- 
ing system, but most wireless security soft- 
ware focuses only on access controls through 
elliptic-curve cryptography (ECC), a smaller, 
more portable form of data encryption. 

Vendor products that use ECC encrypt data 
only as it travels from the wireless device to a 
Wireless Access Protocol (WAP) server, says 
Luther Martin, product manager at encryption 
vendor Cylink Corp. in Santa Clara, Calif. The 
second half of the transaction travels from the 
WAP server to the Web with Secure Sockets 
Layer browser encryption. But the WAP serv- 
er processes all data and credentials in the 
clear, or unencrypted, which Palm has re- 
ferred to as a “small air gap.” 

Martin says this gap is a lot bigger than ven- 
dors want it to appear: Hackers need only ex- 
ploit known vulnerabilities in common operat- 
ing systems to view the data and credentials. 


Pick an Authentication Method 

As more access devices go mainstream, 
mechanisms for authentication (who you are) 
and authorization (what you're allowed to see) 
will continue to diversify. Smart cards and bio- 
metric access devices will lead the way. 


Frost and Sullivan Inc., a consulting firm in 
Mountain View, Calif., predicts a $5 billion 
smart-card market by 2003. The biometric 
access device market will be much smaller — 
$594 million by 2003, according to Inter- 
national Biometric Group LLC in New York. 

“Our organization is looking closely at 
mechanisms for two-factor authentication. 
Biometrics may play a role, but our focus now 
is smart cards, which is becoming a standard 
product as [smart-card] readers have become 
cost-effective,” says Ken Perrin, a senior engi- 
neer for IT planning and business develop- 
ment at Pinnacle West Capital Corp. in Phoe- 
nix. He and others predict that interoperabili- 
ty will still be a problem this year and beyond. 

Chief security officers will also want to 
choose an authentication management system. 
Such systems can link rules engines to directo- 
ries that contain user attributes and privileges 
to restrict access to certain types of data. 
These systems are capable of managing a vari- 
ety of access devices, including wireless, says 
John Pescatore, an analyst at Gartner Group 
Inc. in Stamford, Conn. [Technology, Sept. 11]. 


Bolster Your Architecture 

Issues like these spur improvements in 
overall security infrastructures, which, for the 
most part, are woefully inadequate to support 
online businesses, says Leon A. Kappelman, 
information systems research director at the 
College of Business Administration at the 
University of North Texas in Denton. 

A key driver for infrastructure work will be 
companies’ attempts to overcome outdated 
networks and comply with the new Healthcare 
Information Portability and Accountability 
Act (HIPAA), which regulates security and 
customer privacy in the health care industry, 
says Lestina. She also predicts limited infra- 
structure reworking in the financial industry 
to comply with the Gramm-Leach-Bliley Act, a 
financial deregulation bill approved in 1999. 

Kenneth Cole, MIS director at Sun Health- 
care Group Inc. in Albuquerque, N.M., says it 
will take his organization two years to com- 
plete HIPAA compliance work. “At our corpo- 
rate office, this will involve changes to our se- 
curity policy, with a strong emphasis on em- 
ployee education,” he says. “At the subsidiary 
level, we will also have to ensure compliance 
at both the state and federal levels.” 


Bulletproof Your B2B Exchanges 


Business-to-business exchanges will also 
force infrastructure work this year, according 
to Chuck Ryan, director of information securi 
ty at Molex Inc. in Lisle, Ill., which manufac- 
tures parts for mobile computing devices. 

“Security becomes very big when you look 
at the chain of events that need to occur relat- 
ing to a transaction. Each link has to be secure, 
because everyone in the chain is a potential 
competitor,” explains Glen Gow, president and 
CEO of Crimson Consulting Group Inc. His 
Los Altos, Calif.-based research firm predicts 
$3.9 trillion annually in global business-to- 
business transactions by 2003. 

Varying international laws on privacy and 
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encryption will further compound the task, 
says Ryan, who projects that most companies 
will ease into conducting business-to-business 
transactions during the next two years. 


Recruit Top Talent 

Your chief security officer will be on the 
hunt for streetwise security experts like Ryan 
next year. Lestina suggests that security offi- 
cers will need to become more creative in their 
staffing efforts, finding most of their employ- 
ees inside the organization and then mentoring 
and training them [Careers, Sept. 25]. 

Last year, the leading industry-recognized 
training and certification program was the 
Certified Information Systems Security Prac- 
titioner, offered by U.S.-based International 
Information Systems Security Certifications 
Consortium Inc. (www.isc2.org). In the coming 
year, expect more diverse and specialized se- 
curity training through organizations like the 
SANS Institute in Bethesda, Md., which is get- 
ting rave reviews from IT managers for its rig- 
orous training and certification programs, in- 
cluding intrusion-detection, firewall and inci- 
dent-analysis certifications. 


Train Regulatory Experts 

Chief security officers also face a shortage 
of privacy experts this year, as the medical and 
financial industries feel the squeeze of the 
HIPAA and the Gramm-Leach-Bliley Act, 
according to van de Gohm. 

However, because these jobs are so regula- 
tory-driven, privacy officers will most likely 
originate from legal and consumer affairs de- 
partments, says Alan Westin, professor of pub- 
lic law and government at New York’s Colum- 
bia University and president of Privacy and 
American Business, a privacy research and 
professional services group in Hackensack, NJ. 

Still, the security team will need to get up 
to speed on HIPAA and Gramm-Leach-Bliley 
requirements because it will be directly over- 
seeing the technical and employee-awareness 
compliance initiatives. 


Choose a Reliable ASP 


Customer and commercial data processed at 
ASP sites will also complicate the job of the 
chief security officer. IDC predicts that the 
ASP market will grow at a compounded rate of 
93% per year — from $74.4 million in 1999 to 
more than $2 billion in 2004. 

Tony Parziale, chief technology officer at 
Maxxim Medical Inc. in Clearwater, Fla., says 
ASPs will face a number of security challenges 
this year, like working with second- and third- 


tier business partners and monitoring traffic. 
In fact, advises Pescatore, you shouldn’t 
even consider an ASP that can’t address secu- 
rity at the network, platform, application, op- 
erations and end-services relationship levels. 


Determine Your Risk Level 

Your security officer will need to distinguish 
between risks and threats, says Peter Tippett, 
chief technologist at TruSecure Corp., a securi- 
ty services firm in Reston, Va. “IT managers 
need to learn how to behave in risk-based ori- 
entation instead of threat-based,” he says. 

Here’s how: Start with a list of top vulnerabil- 
ities, like the one found at the SANS Institute’s 
Web site (www.sans.org/topten.htm). Next, look 
at critical applications and determine what lev- 
el of risk your company can assume in order to 
see those processes through, says Ryan. 

“The core of it is getting down to your own 
developers and your customers inside your 
business and prioritizing business and techni- 
cal requirements,” he says. 


Get Involved in Standards 

The underlying key to all of these issues is 
standards. “In order to advance e-commerce, 
you must have security standards,” says Jerry 
Dixon, director of information security at 
Marriott International Inc. in Bethesda, Md. 
“The industry ... still has a long way to go to 
enable true e-commerce. A prime example is 
public-key encryption. We cannot validate a 
digital signature among competing products.” 

Dixon says he’s heartened to see not only 
vendors but also the security community at 
large start to pass standards that will simplify 
some of the complexities faced by IT security 
leaders. For example, he points to the Common 
Vulnerabilities and Exposures (CVE), an in- 
dexing system for vulnerabilities and threats 
that was started last year by Bedford, Mass.- 
based Mitre Corp., a research and support 
agency for the U.S. Department of Defense. 

“[The CVE] effectively created a national 
standard on communicating different types of 
vulnerabilities and exposures so that all agen- 
cies — commercial vendors, alert publications 
and newsgroups — are speaking the same lan- 
guage,” Dixon says. “This now allows security 
teams to effectively communicate exploits or 
findings with one another.” 

The key with standards is to get involved. 
There are several working groups currently 
hashing out security standards. The SANS Insti- 
tute is working with the Center for Internet Se- 
curity in Bethesda, Md., and Visa U.S.A. Inc. in 
Foster City, Calif., to release security standards 
by mid-July. And last October, the International 
Standards Organization in Geneva published a 
first draft of fast-track security standard ISO 
17799, an outgrowth of a British standard. 

Widespread adoption of such standards will 
be the only way to advance robust business-to- 
consumer commerce this year, says Dixon. 

Van de Gohm agrees: “ISO 17799 will help to 
demonstrate that you’ve met a minimum level 
of integrity. It will introduce that elusive ele- 
ment of trust, because business partners can 
say, ‘I know what your security processes are, 


os 


since we both have the same certification.’ ” 
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Checklist 


Make absolutely sure your hardware 
will support Windows 2000 


Allow ample time to plan and execute 
A company with 2,000 or 3,000 servers 
might need three years. 


Choose your pilot installation carefully - 
one that's representative of the whole 
yet won't disrupt the core business. 


Train existing staff whenever possible 
but leverage consultants to add breadth 
of experience. 


BY ROBERT L. MITCHELL 


HEN MICROSOFT CORP 
introduced Windows 
2000 last February, you 
may have been among 
the many IT managers 
who were wary of mov- 
ing forward too quickly. 
But now that Service 
Pack 1 has shipped and early adopters have 
come forth with several months’ worth of war 
stories, you’re probably not pondering whether 
to pull the Windows 2000 migration lever, but 
when and how. 

Well, your first instinct was right — don’t 
move too quickly. The key to success, say IT 
managers who have started down that road, 
lies in copious planning. 

“Tt’s a much bigger undertaking” than you 
might think, says Mike Giresi, director of 
telecommunications and desktop services at 
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9 is 
“It's fundamental to configure the client and do it right the first time,” says Campbell Soup CIO 
Mike Crowley, pictured here with Mike Giresi, director of telecommunications and desktop services. 
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Campbell Soup Co. in Camden, N.J. Campbell 
is in the early stages of its move to Windows 
2000 from 6,500 NT Workstation desktops 
and 150 NetWare 5.1 file-and-print servers and 
Windows NT 4.0 application servers. “For 
everything from the network on through, you 
need to include all those cost factors or you 
will underfund the project and it will not be 
completed properly,” Giresi says. 

Campbell Vice President and CIO Mike 
Crowley also advocates the go-slow approach. 
“We have been planning and doing research 
and participating in work sessions with our 
peers, with other vendors, with other major 
software providers, which is why we haven't 


moved more aggressively,” he says. “We want to 


make sure we do it as efficiently as possible.” 


Articulate the Benefits 


The key to migration is making sure you not 
only understand the benefits of migrating to 
Windows 2000, but are also able to convey 
those to your audience, whether it be end 
users or departmental IT peers, says Jerry 
Higgins, a senior manager at Allstate In- 
surance Co. in Northbrook, Ill. Allstate plans 
to begin migrating more than 60,000 NT 
workstations in March, with 2,500 servers to 
follow by fall. 

But since Allstate has a decentralized IT in- 
frastructure, Higgins relies on individual busi- 
ness units to deploy the server and workstation 
disk images he issues, so it’s important that 
everyone understand the benefits and the goal. 

It’s also important to decide which servers 
should be upgraded and in what order. Dan 
Kuznetsky, an analyst at Framingham, Mass.- 
based IDC, says managers are upgrading 
“largely file-and-print services to begin with, 
with increasing use [of Windows 2000] as an 
application platform.” 

New applications that require Active Direc- 
tory, such as Exchange Server 2000, may put 
application servers at the top of the list — and 
offer the ammunition you need to justify a 
general migration to Windows 2000. 


Migrate Selectively 

Migrate no application before its time, 
warns Giresi. “We have close to 100 [applica- 
tions], many of which are not compatible with 
Windows 2000 yet,” he says. 

“We've tested these, and they all seem to 
work. [But] if something does fail, we can’t go 
back to the vendor and troubleshoot it,” adds 
Crowley. 

Even if you have some noncompliant appli- 
cations, you can still move forward with a 
mixed Windows NT/2000 environment, says 
Tony Bernard, director of technical architec- 
ture at business-to-business exchange service 
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vendor Freemarkets Inc. in Pittsburgh. Ber- 
nard, who has approximately 10% to 15% of his 
600 users and 120 servers worldwide running 
Windows 2000, says he can’t wait for the Win- 
dows 2000-compliant version of his new soft- 
ware from Siebel Systems Inc. in San Mateo, 
Calif. “We will deploy Siebel on NT 4 and 
upgrade when we can,” he says 

But even Windows 2000-certified applica- 
tions won’t run well without the right hard 
ware, so make sure your hardware will support 
Windows 2000. “If you go out thinking that 3- 
or 4-year-old hardware will support Windows 
2000, you are sadly mistaken,” says Giresi. 

And on the desktop side, “it’s fundamental 
to configure the client and do it right the first 
time,” Crowley says. 


Look Hard at Active Directory 

Perhaps the most critical planning compo- 
nent is Active Directory, Microsoft’s integrat- 
ed enterprise directory system for Windows 
2000. “Companies should be very careful here 
because ... it can be extremely costly to go 
back and do it again,” says Giresi. 

Unlike pure Windows shops, Campbell 
Soup uses Novell Inc.’s Novell Directory 


We’re picking our 
opportunities where reliability 
is critical. But we’re not 
upgrading everything just to 
upgrade everything. If there’s 
business value there, 
we're going to go after it. 
TONY BERNARD, 


DIRECTOR OF TECHNICAL ARCHITECTURE, 
FREEMARKETS INC. 


Services (NDS), which means Crowley has 
higher expectations of Microsoft’s directory 
service. But forget about making a migration 
decision based on the technical merits of 
Active Directory vs. NDS, he says. 

“T think that Microsoft has yet to prove that 
they have the same functionality [as NDS],” 
Crowley says. Despite these concerns, how- 
ever, he says he’s leaning toward a full imple- 
mentation of Active Directory. “It’s the right 
business decision” to consolidate on one 
directory and one network operating system, 
he says. “The fewer technologies you have, the 
cheaper it should be to run your operations.” 

Allstate’s Higgins says you should be aware 
that planning the Active Directory structure 
involves more than technical issues, particu- 
larly when IT management is distributed. 

“Political conversations occur when one [IT 
department’s NT administrative] domain gets 
collapsed into another” in the new Active 
Directory structure, he says. 

In short, IT managers need to create the 


structure right the first time, which requires a 
good technical design. But that can’t happen 
unless all parties agree to the new structure 
and its management implications up front. 


Block Out Ample Time 


Give yourself plenty of time to plan and 
execute if your company is large. How much 
time? “If you're a large organization with 2,000 
or 3,000 servers, that might be a three-year 
process,” says Kuznetsky. 

At San Francisco-based Wells Fargo & Co., 
enterprise engineering manager Scott Hall 
spent 18 months planning a single, monolithic 
120,000-user Active Directory structure. Of 
those, “40,000 users are now ready to use 
Active Directory for authentication,” he says. 
Hall says he hopes to complete his migration 
by the end of 2001. 

Bernard’s advice: “If you’ve got a complex 
domain structure or a lot of servers, a more 
gradual migration approach is better on multi- 
ple fronts. You can spread your investments, 
and the planning is critical.” 

And don’t be afraid to limit the scope of the 
project, Bernard cautions. “We’re picking our 
opportunities where reliability is critical. But 
we're not upgrading everything just to up- 
grade everything. If there’s business value 
there, we’re going to go after it,” he says. 

Once you have your plan in place, carefully 
design your pilot installation. “Pick something 
that’s representative enough that you will be 
able to test the features that are important to 
your organization but discrete enough that if 
the technology doesn’t work out, you don’t 
disrupt your core business,” says Bernard. 


Decide Whether to Outsource 

Bernard recommends training staffers 
rather than bringing in consultants when 
preparing for a Windows 2000 migration. 

“Our people put in a lot of time to come up 
that curve,” he says. “[But] it wasn’t that dis- 
ruptive, and [the staffers] were energized to be 
involved in something new.” Bring in extra 
help for the mundane work, he advises. 

Higgins says he agrees in principle but when 
you're planning a major migration, there’s no 
substitute for experience. “Allowing [staffers] 
to work on the newest technologies is one 
method of enriching their work experience, 
[but] we have had to leverage external consult- 
ing personnel who have been through migra- 
tions at other corporations,” he says. 


Prepare Top Brass for Cost 

Finally, while return on investment is im- 
portant, don’t expect to base a migration deci- 
sion exclusively on ROI, users say. Higgins ac- 
knowledges the costs but says his organization 
accepts that a migration is a must. “We look at 
it, to a large extent, as an extension of the 
technology we already have,” he says. 

That’s not to say that IT managers should 
ignore price. Hall advises getting a tight handle 
on migration budgets and preparing top man- 
agement for the bill. “When we did the cost 
justification, our executives fell over,” he says. 
“We have 1,700 domain controllers. Think of 
the support costs and licensing costs.” + 
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In case you'v ‘ve gotten it backwards, you're supposed to work 


eight hours a day, and your network's supposed to work twenty-four. 


yt 





Two things are obvious. Your company needs o more reliable data network. And you need some sleep. 
That's where we can help. At BellSouth, we've designed an integrated voice/data network that has an 
exceptional record of reliability. Incorporating an architecture of over 14,000 SONET rings, our self-healing 
network provides automatic restoration and rerouting capabilities to guard your company from debilitating 
disruptions. We've even built a number of secure, bunker-like equipment facilities to withstand winds of up to 
150 mph so your network stays up and running in even the most horrific conditions. And of course, we deliver 
world-class support and customer care. Now go home, get some sleep, and visit our website in the morning. 
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Wireless 


Checklist 


@ Start small with wireless application trials 


@ Pick an architecture that makes sense 
Some users don't need to be persistently 
connected, for example 


Talk with a range of users, some experi- 
enced and some not, about usability issues 
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BY MATT HAMBLEN 


HAT A DIFFERENCI 
five years makes in the 
fast-changing wireless 
world. From a failed 
wireless project in the 
mid-1990s, Andy Kasz- 
nay learned how to get 
payback from a current 

inspection-reporting application. 

The wireless project launched in 1995 by 
Northeast Utilities Inc. in Berlin, Conn., failed 
at a cost of $1 million, says Kasznay, a software 
engineer at the utility, which has 1.2 million 
customers. 

“Tt was a year and a half of time lost, with 
a year trying to make it work and half a year 
realizing it wouldn’t work,” he says in reflec- 
tion. “I considered it a huge loss, but we 
learned a lot.” 

In fact, the lessons learned from a wireless 
failure could make your next endeavor a suc- 
cess. What Kasznay and Northeast learned 
helped the utility build another wireless appli- 
cation two years ago that’s still working well, 
Kasznay says. 

With the current application, 15 field inspec- 
tors carry rugged laptops equipped with wire- 
less modems. They connect to an enterprise 
database to track spills of hazardous materials 
such as polychlorinated biphenyls, also known 
as PCBs, which are used to insulate electricity 
transformers. 

The application lets chemists and people 
who monitor government environmental fil- 
ings get up-to-the-minute reports. It also saves 
time, because all the information is entered 
directly into the proper fields without having 
to be transcribed. 


Start With Small Projects 


“It’s definitely paying for itself over the 
paper-based system,” Kasznay says. “In fact, 
we have better information everywhere in the 
organization and a reduction in the things that 
have fallen through the cracks.” He says each 
rugged CF27 laptop from Panasonic Personal 
Computer Co. in Secaucus, N_J., costs $6,000, 


and each month of airtime per user costs 
approximately $30. 

Kasznay’s wireless failure-to-success experi- 
ence isn’t uncommon and provides lessons for 
how firms should deploy wireless projects. 

The best advice is to start small and work up 
to bigger projects. At Northeast, for example, 
the success of the spill-reporting application 
has given IT workers the confidence to consid- 
er sending power-outage reports to executives 
via smart phones and wireless information to 
crews repairing streetlights, Kasznay says. 

He says the 1995 failure spurred Northeast 
to build a reliable wireless infrastructure. Be- 
cause even the best wireless networks have 
gaps in service, Northeast also built in the 
ability for inspectors to download data to a 
laptop on a reported spill and keep inputting 
data even if they hit a dead coverage zone. 
What they report is then automatically cached 
until a wireless connection is reestablished. 

Software from Sybase Inc. subsidiary iAny- 
where Solutions Inc. in Emeryville, Calif., and 
Broadbeam Corp. in Princeton, NJ., was used 
to help link the application to a database and 
cache information. 

From an organizational standpoint, it’s 
important to keep users informed during 
planning. In the inspector project, Northeast 
pulled together end users and software and 
wireless experts for biweekly planning meet- 
ings, something the utility hadn’t done in its 
first undertaking. 

“We learned that people are not used to the 
wireless paradigm,” Kasznay says. “Wireless is 
really a different medium from the Internet 
and other forms of communicating.” 


Choose a Reliable Network 


At Guaranteed Overnight Delivery in New- 
ark, N.J., the organizational learning curve has 
been steep. But a wireless package delivery ap- 
plication that’s cost-effective and increases 
productivity has been found, says Heath Snow, 
director of technology. 

Guaranteed believes that a fast, reliable 
wireless network and inexpensive off-the-shelf 
hardware have made a big difference in the lat- 
est application, according to Snow. 





Andy Kasznay: A failed wireless project at Northeast Utilities was “‘a huge loss, but we learned a lot. 


“It’s been a grueling path to go through,” 
says. “But our current application has reached 
return on investment in a year.” 

Guaranteed has equipped its drivers in the 
northeastern U.S. with about 300 wireless 
handhelds from Research In Motion Ltd. 
(RIM) in Waterloo, Ontario, for the past 12 
months, Snow says. By using the devices to 
get delivery information wirelessly from a 
dispatcher, drivers now make as many as 20 
deliveries per day with as many as 10 pickups, 
compared with 15 deliveries and five pickups 
before the handhelds were used. 

Cingular Wireless in Atlanta, formerly Bell- 
South Wireless Data LP, provides “fé i 
network coverage and response times of 56K 
bit/sec. for short-message connections, Snow 
says. If a driver moves out of the coverage 
area, the system keeps repeating a message 
until he’s back in range. The RIM handhelds, 
each of which costs about $350, have replaced 





two previous ruggedized handhelds that cost 
as much as $3,000 apiece, Snow says. But 
Guaranteed has a long-term deal with Cingu- 
lar that allows it to get updated hardware 
when it comes on the market. The cost of air- 
time is up to $40 per month, Snow says 

He attributes the increase in driver e 
ciency to a more reliable network. Drivers and 
dispatchers get a confirmation when a mes- 
sage is sent, which saves them from having to 
find a phone to double-check. With the new 

tem, drivers don’t even carry cell phones, 
which increase costs, Snow : 


Know Your Needs 


Wireless users say knowing what they want 


from a wireless service, like great reliability, 
and what they don’t want — which, for some, 
is advertising — can help with the success of 
the project. For Dr. David Donnell, an internist 
in private practice in Dallas, wireless prescrip- 


tions have saved him and his staff two to three 
hours per day, for a savings of about $150 per 
day, he estimates. 


Donnell pays $50 per month to ePhysician 


Inc. in Mountain View, Calif., for a wireless 
service that allows him to carry patient rec- 
ords on a Palm V device from Santa Clara, 
Calif.-based Palm Inc. On the handheld, he can 
pull up a patient record, write a prescription 
for a new drug or refill and have the pre 


rip- 
tion sent wirelessly to a fax machine at a phar 
macy. “I’ve even sent a prescription from a 
boat in the middle of a lake an hour south of 
Dallas 

With an active database of 2,000 patients, 
Donnell estimates that he receives requests 
for nearly 100 prescriptions and refills each 
day. Before he started using the wireless sys 
tem eight months ago, he tried two other wire 
less prescription-ordering systems that were 
free but required him to read advertising from 
pharmaceutical companies, which he dislikes 

“In 10 years, I’ve never learned anything 
from a pharmaceutical ad d rather 
pay $50 a month to avoid the ads.” 

One of the other wireless prescription sys- 
tems he used wasn’t reliable. “We'd send a pre- 
scription to a pharmacy wirelessly up the 
street in Texas and a pharmacy in Oregon 
would call to ask why we were filling a pre- 
scription there,” Donnell says. 


” he says. 


” he says. 


Develop Your Strategy Now 

The applications used by Northeast, Guar- 
anteed and Donnell exemplify the interest in 
using wireless technologies to make work 
more efficient, analysts say. Despite relatively 
few successes on record, there is payback to 
be had from wireless projects, and it makes 
sense to build a strategy, launch small trials 
and get management buy-in. 

“A lot of companies are moving forward at a 
good, solid pace with wireless projects, both 
for internal users and consumers, while others 
are asking if there’s a consumer market for 
wireles an analyst at Giga 


Wireless applications for wareh 
delivery trucks have 
s, but the movement of wi 
consumers for activities such as trading stocks 
is a fairly recent phenomenon. Zetie says that 
even though more than 50 brokerages allow 
wireless trading, some large brokerages are 
“waiting in the wings” to see if there really 
will be a return on investment. 

Despite the success stories, some analysts 
note that there haven’t been as many as they’d 
expected to see after years of promises. “Hon- 
estly, there aren’t a lot of good, long-term wire- 
less application examples to say whether there 
are any real successes,” says Jack Gold, an ana- 
lyst at Meta Group Inc. in Westboro, 

i ys the measurements are easier to 
make for internal projects such as wireless 
LANs that link workgroups in a campus. At 
Cingular, Zetie says, about 15,000 technicians 
are each saving as much as an hour each day 
in making and receiving wireless requests for 
parts and route information, which he calls a 
“pretty good ROI.” # 
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2001: Another 
Odyssey for IT 
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BY PIMM FOX 


ELCOME to the real new 
millennium. Last year 
was just a publicity 
hound’s excitement run 
aground — with Inter- 
net access all the rage. 
This year, we'll really 
see some change. 

The fast lane of connectivity, whether for 
voice or data, implies the ability to execute 
business-to-business integration between 
companies and their vendors. The desire for 
bandwidth will continue to push a variety of 
technologies: Copper, twisted-pair, fiber-optic 
and wireless will offer customers different 
costs and different IT architectures. And look 
for a blend of all the different access methods 
as your workforce gets mobile. 

Shucks, you’re going to have to snag the best 
talent — all the time. Missing out on quality 
IT personnel because you don’t have reliable 
remote access or a solid communications 
infrastructure can put your operations at a 

disadvantage. It can also make your 


[ OPINION ] company look vulnerable and less 


attractive; it’s better to be known 
for being the best in your field. 

Each innovation for secure, broadband con- 
nections will reveal a host of new problems — 
and solutions. So be prepared to be nimble. 
How fast can you add capacity to your IT sys- 
tems? Is your data center taking full advantage 
of the Web? Companies that ignore new tech- 
nologies often get left behind or find it excru- 
ciatingly expensive to catch up. Being able to 
scale solutions in the enterprise is still a key 
element of IT success. 

Of course, you're never going to be com- 
pletely successful. Just because the digit in the 
year changes from a 0 to a] doesn’t mean 
we’re in another digital Fantasia. No, looking 
forward, we can honestly say we 
know our limitations. 

We have to go global. New 
markets mean new laws, new 
cultures and new local content 
for Web sites. Those sites will 
also have to be secure — and will 
have to conform to all the new 
privacy legislation that’s sure 
to be on the legislative agenda. 

New laws already exist in Europe, 

and if you have any European 

customers, you're going to have Binns Fox 
to implement new procedures. It ae 
will be good business for secur- We 


He can be rea 
pimm_fox @ 
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Coast bure 


ity software and service companies. 

And security or, rather, the lack of it will be 
a growing problem: This is the year your con- 
versations will be overheard and your location 
known. So make sure you have top-notch 
people you can talk to about IT security. 

One answer is to make security part of an 
overall Web strategy. But keep your strategy 
simple, and use good business practices to get 
the right customers to come to your site. 

Doing business online should be good busi- 
ness for everyone. That’s where the wonderful 
potential of IT comes in. 

For years, IT was seen as a bottom-line item. 
It could trim costs, help make a company more 
efficient and more productive and give you a 
business to run. But as we click over to 2001, 
this could be the year technology assumes its 
place above the line. It might be recognized as 
the driver of revenue, a seamless expression of 
the wheels of commerce. 

The IT manager, unlike any other person in 
the corporate structure, is his own customer. 
Successful IT managers and executives have 
little trouble understanding the importance of 
customer data, service histories or purchase 
patterns — the “clickstream” data from their 
networks and Web sites. They seek out ex- 
perts who can be the gatherers of this infor- 
mation, giving them time to show the nontech- 
nical people in the enterprise what technology 
can do for their businesses. 

And as they struggle through another mi- 
gration — to Windows 2000 this time — be 
patient. Take a big-picture look at how you're 
going to manage the transition. Will your 
hardware support it? Is your staff fully 
trained? 

I think Microsoft missed a big opportunity 
by not calling it “2001: A Windows Odyssey,” 
but this year will surely consist of four quar- 
ters of transition, with trial as well as error. 

A particular area in which to avoid errors 
will be anything having to do with the govern- 
ment. Like it or not (and judging by the recent 
presidential election, many people don’t) 
government action is continuing on almost 
every front related to technology and IT. 

Washington and local lawmakers are very 
interested in the widespread use of technol- 
ogy inside the workplace. So respond to gov- 
ernment requests for comments on regulatory 
proposals with others in your industry. Don’t 
go it alone. 

Remember that politicians seem to always 
be on the lookout for reasons to put laws into 
place. I guess it’s their job. But we 
don’t have to make it easy for 
them by having sloppy security, 
privacy and oversight policies. 

IT managers can help forestall 
government action by getting 
industry associations to take seri- 
ously the issues of personal secu- 
rity, privacy and online security. 

Finally, 2001 will be the year the 
New Economy keeps reinventing 
itself, and when IT managers will 
have greater power and responsi- 
bility than ever before. 

Live long and prosper. 


computerworld.com 








SP — a major Breakthrough in 
= system performance 


New Technology in Diskeeper® 6.0 makes it the most powerful and intelligent 


network defragmenter ever created... 
ISKEEPER is proven to increase system speed on average 56 —- 81% on Windows® NT° — New “Set It and Forget It”’/Smart Scheduling 
even more on Windows 2000. So how do you make the world’s best selling network options. 


defragmenter even better? We made it faster! Server version controls remote machines running 
Windows 95/98/Me/NT/2000 — even when mixed. 


Cutting-edge algorithms in new Diskeeper 6.0 give it blazing speed to defragment any 
Safe and Compatible: Certified for Windows 2000 


drive on your network. Only nominal system resources are used in a lightning-quick 
process. In addition, we created 

Smart Scheduling to make defragmenting your network easier and more automated. This 
option lets you go beyond setting fixed schedules and allows run times to be dynamically 
configured based on the condition of your disks. 


Experience the power of a hardware upgrade... at a fraction of the cost. Buy new Diskeeper . oF Saitware 


Volume Licensing, Gov't/Educational Discounts 
available 


6.0 today! For more info and FREE Trialware go to www.diskeeper.com/dkinfo. 
Software 


Available for 99 B : “a Sagar ——~ 
FREE! DiskeePer Lire ro, [it] @ = S wor execsoft.com 








MILLION DOLLAR SERVICE 
WITH OVER 


IN SAVINGS. 


Saks Incorporated has long been famous for attentive, personal service. So when they wanted to restyle their customer service operations for today’s eBusiness 
environment, they chose Aspect. Using Aspect eCRM solutions, Saks integrated three contact centers into a single virtual contact center. Without adding 

a single agent, Saks now handles 16% more customer interactions. Whenever—and however—their customers choose. It’s all resulted in three-quarters 

of a million dollars in annual savings, while preserving Saks’ legendary service for generations to come. It seems that success does indeed come gift-wrapped. 


Get the whole story behind Aspect’s solution for Saks at www.aspect.com/go/maxsavings or call us at |-888-412-7728. 
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Hallmark IT Folds 
Into Its Business 


Interviewee: Barbara Null, 
portfolio manager for desktop 
publishing systems. “! support 
the Hallmark creative and 
graphics group . . . , including 
art directors, designers, artists, 
editors. . . . I'm accountable for 
the well-being of our product 
creation systems - making sure 
that they're aligned strategically 
with the business.” 
Company: Hallmark 

Cards Inc. 

Main location: 

Kansas City, Mo 

Number of IT em- 

ployees: 700 world- 

wide; the majority are 

based in Kansas City 

Number of em- 

ployees (end 

users): 21,000 

worldwide, including 

5,700 at headquar- 


ters What It's Like 


What's it like 

presci To Work 
designers and 

artists? “| always say | have 
the best of all worlds because | 
love technology and | get to 
work with current technologies 
and to explore new ones. But | 
also get to work with people 
who create beautiful art. . . . I'm 
a left-brain person with a strong 
right-brain influence, so it would 
be a stretch for me to be in pure 
IT without the exposure to all 
the creativity.” 

What impact does the holi- 
day season have on IT in 
your group? “| can’t think of 
a time that isn't extremely busy. 
The design work [on cards, 
ornaments and other gifts] 
occurs early on, then we do 
prototypes and then move into 
the production cycle. We have 
different teams launching all 
throughout the year.” 
Employee reviews: Annual. 
“Employees have a lot of input. 
Sometimes you write your own 
review and pass it to your man- 
ager, who pulls that together 
with their own review, and then 
you have a dialogue on what 
you've completed during the 
year, how you met your objec- 
tives and what new challenges 
you should pursue for the com- 
ing year.” 

IT bonus programs: “There's 
areal focus on retaining quality 
employees in the new organiza- 
tion, and a team is working on 





Creativity 
Strategy 


putting a reward system in 


place as part of that. In the past, | 


there have been spot bonuses 
in IT for exceptional work, but 
the definition of that hasn't al- 
ways been exactly clear. So 
they are revisiting that to work 
out a more complete package.” 
Dress code: “You can find 
every style of dress imaginable 
In IT, we're business casual, 
keeping in mind that there are 
occasions when we need 
more businesslike 
attire.” 
Workday: “We're 
really family oriented, 
so you don't have to live 
here to get the job done 
It's usually an eight- to 
nine-hour day. But if 
people need to stay, 
they will. An excep- 
tionally long day 
would be 12 to 14 
At hours.” 
*** Decor: “Displays of 
Hallmark artwork by 
our own artists plus museum- 
quality work by well-known 
artists like an Andy Warhol and 
Roy Lichtenstein. Employees 
are free to decorate their own 
work spaces.” 
On-site day care? No 
On-site amenities: Fitness 
center with weight machines 
and aerobics classes; Hallmark 
Square, a courtyard shopping 
area. 
Office mascot: “A huge pur- 
ple elephant that one of our 
artists wore as a Halloween 
costume, and everyone signed 
it. It's enormous, with 5,000 
signatures.” 
Last companywide/depart- 
ment perk: Hallmark night at 
the Worlds of Fun amusement 
park in September. 
Would employees feel com- 
fortable e-mailing the CEO, 
Irv Hockaday? “Those with 
e-mail might feel fine with that. 
... He also holds a Town Hall 
meeting regularly.” 
What do you like most 
about working in Hallmark 
IT? “What we make and what 
we represent - we help people 
celebrate special moments. 
That's a lot to get out of an em- 
ployer. And in IT, I'm surrounded 
by the best talent I’ve ever 
known.” 
- Leslie Goff 
(Igoff@ix.netcom.com) 





BUSINESS 


JIM CHAMPY 


Call Time-Out 


HERE’S A CLEAR TREND emerging for this year’s IT 

budgets: They won’t increase quite as much as they have 

in recent years. That means the IT services industry will 

grow more slowly than its normal breathless rate. 

Industry analysts predict growth in IT services will 

be 7% this year. This may be bad news for people in the business, 
but it’s good news for consumers of technology, who need to catch 
their breath and think for a moment. 


There are several reasons for the slowdown. I 
believe that line business managers — such as 
CEOs and marketing executives — are uncertain 
about technology’s payoff. Last year’s dot-com 
downturn has managers confused about what 
the Internet can really do for business. So, paus- 
ing for a moment may be the right thing to do. 

Also, most major companies have just spent 
millions, if not tens of millions of dollars, on 
ERP systems. These companies 
were expecting a period of relative 
IT calm after the ERP wave. Now 
their managers are being told that 
it’s time to Webify those systems 
and spend more in order to handle 
the expected surge in e-business. 

For the person who approves 
the IT budget, that may spell dan- 
ger ahead. He won’t want to repeat 
the ERP experience of unplanned 
costs and low paybacks. As unful- 
filled demands start to build in IT, 
line managers will continue to be 
challenged on more traditional 
fronts: How does the company 
compete on something other than 
price? What does it mean to oper- 
ate globally while understanding 
that local markets are still impor- 
tant? What about scale and the ef- 
ficiencies of consolidation — who 
will buy whom next? Innovation 
seems to be even more important 
today, so how can a company con- 
tinue to generate new ideas? 

The old conundrums of busi- 
ness haven’t gone away. They’ve 
just been intensified by what IT 
makes possible. 

As the new year begins, it might 
help both line and IT managers to 
stop separating IT questions from 
business questions. 


| 


Here are three for consideration: 
gw Is your company using IT, especially the 
Internet, to help streamline processes within 
the organization and reach out to suppliers and 
customers? You don’t have to achieve the tech- 
nology-enabled operating efficiencies of a Cis- 


There are 
several rea- 
sons for the 
slowdown, 
so pausing 
may be the 

right thing 

to do. 


co Systems, but to compete in the future, you 
had better come close. The next wave of re-en- 
gineering will be cross-company, presenting a 
huge challenge but also yielding great benefits. 
@ How is your company using the Internet to 
create relationships with customers, suppliers, 
partners and competitors? It’s becoming in- 
creasingly clear that new value propositions for 
customers will be created from new business 
combinations. You don’t have to 
be as ambitious as GM, Ford and 
DaimlerChrysler were when they 
created Covisint, their online mar- 
ketplace. But you may not have the 
scale or product variety to go it 
alone. 
w How can you use IT to create 
new products and services? The 
ubiquity of wireless technologies, 
combined with the Internet, opens 
vast areas of opportunity. You may 
not have the resources of, say, Fi- 
delity, to transform how securities 
are bought and sold, and you may 
not be able to launch an invest- 
ment fund in special markets al- 
most instantaneously. But the big 
guys haven’t cornered the market 
on acceleration and innovation. 
These questions are large in 
scope. They’re not the incremental 
types of questions that appear in 
typical IT planning cycles, like 
how much more to spend in this 
department or on that application. 
But they are the questions that 
need to be answered to get a com- 
pany focused on the real business 
opportunities behind technology. 
Until managers are more certain of 
the answers, they'll be reluctant to 
spend more. By slowing down and 
doing some hard thinking, compa- 
nies will be able to accelerate — intelligently — 
their technology investments. D 





Champy is chairman of consulting at Perot Systems 
Corp. in Cambridge, Mass. He can be reached at 
JimChampy@ps.net. 
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In the wake of dot-com tai 
traditional companies are scram- — 
bling tolure backIT talent. The 
successful ones combine the best 
4 of both traditional and e-business 
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ILL GODFREY Says he’s well 
aware of the need to act fast 
and sell hard when recruit- 
ing a prized IT professional 
for e-business development. 

“We hired someone out of a dot-com 
who had three or four concurrent job 
offers. He came to our attention on a 
Monday, and we closed the deal in a 
week,” says Godfrey, who is chief tech- 
nology officer at Dow Jones & Co. in 
New York. In the interim, the job can- 
didate “spent time with the chairman 
of the board, the senior VP of our elec- 
tronic publishing division and all the 
people who would be his colleagues, 
so he could access the vision, the mis- 
sion and the values of the company.” 

Finally, the candidate “was attracted 
by the Dow Jones brand and WSJ.com,” 
Godfrey says. “He wanted to be part of 
an electronic venture that had a lot of 
momentum within a brick-and-mortar 
company.” 

So, too, do a lot of other IT profes- 
sionals, who are increasingly jumping 
back from dot-coms to traditional 
companies. But they’re not looking at 
just any companies; they prefer those 
with a strong electronic presence. Call 
it the best of both worlds. 


Back to Bricks and Mortar 

In the wake of dot-com tailspins, IT 
professionals are finding that larger, 
traditional companies have several 


positive traits, including the benefits of | 


scale, greater bench strength, more ca- 
reer paths and larger budgets as well 
as technology challenges. 

“Any brick-and-mortar with a signifi- 
cant dot-com presence is a hot com- 
modity,” confirms Barbara Gomolski, 
research director at Gartner Institute 
in Fallbrook, Calif. “IT professionals 
are no longer so anxious to jump ship 
for a dot-com, and dot-coms will be 
less of a factor in the IT staffing pic- 
ture this coming year.” 

That isn’t to say that dot-coms 
haven't had a lasting effect on the job 
outlook. “They have essentially upped 
the ante for how IT professionals want 
to be treated in terms of flexibility, 
perks and rewards,” she says. 


Cash Is King 

When it comes to compensation, 
cash is king this year, says Godfrey. 

“Stock options mean far less, and 
candidates want more up front,” God- 
frey says. “Most candidates are caring 
more for their first year W-2 than they 
are about getting equity.” 

And why not? Technology profes- 
sionals are no longer thinking about 
long-term careers with a single compa- 
ny. So the here and now (cash) is much 
more attractive than the future 
promise that stock options hold. 

When it comes to the amount of 
cash that managers will be shelling 
out, top IT wage earners this year will 


| be “those good ol’ Oracle DBAs,” 


| man resources 
| Seattle-based visual content provider. 





| bus, Ohio. ” 


| salary, he 
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Gomolski. Other highly paid fields will 
include security, IT architecture, proj- 


| ect management, Web development 


and Unix administration, she says. 
But looking for qualified IT staff is 
not about technology alone, says Bill 


| O’Neill, senior vice president of hu- 


at Getty Images Inc., a 


Getty is looking for Oracle database 
administrators, Unix administrators, 
Internet developers and e-commerce 
project leaders. But “it 
comes down to being able 
to have the technical skill 
level and transform that 
into business reality,” says 
O’Neill. “The ability to pri- 
oritize projects, deliver on 
time and get it out to cus- 
tomers — that is key for us.” 


Paying More for Less 


Hiring managers can also expect to 


| pay signing bonuses to lower-level IT 
| professionals, says Frank Giannanto- 


nio, vice president of direct marketing 


| systems at Limited Technology Ser- 


vices, the technology arm of the retail 
company The Limited Inc. in Colum- 


ly project-related rather than based on 
says. 

Giannantonio says he would pay 
sign-on bonuses to find qualified can- 
didates at any level but can most easily 
justify doing so if the candidate has 
strong experience in various systems 


| disciplines. That, combined with the 


energy and skills for electronic retail- 
ing, would make for a very strong can- 
didate. “We have an online transaction 
environment that requires cross- 
checks, stress-testing — disciplines 
that are inherent in the development 
process,” he says. 

Godfrey says he’s also noticed that 
more employers are willing to offer 
sign-on bonuses — and more candi- 
dates are expecting them. The combi- 
nation of those two trends has resulted 
in workers often asking for much more 
than their experience justifies. 

And the candidates are getting away 
with it. Godfrey says he’ll hire some- 
one who is a little too “junior” for 
more pay if the candidate has an attitu- 
dinal fit with company values and a 
promising profile. 

“If someone has the values and the 
competencies but is a little light on 
skills, that is where you compromise. 
You take a bet. You have pressure to 
fill the job, and you think someone fits 
80% of the profile and you make a leap 
of faith,” Godfrey says. 

The need for a cultural fit works 
both ways. Godfrey says he sees plenty 
of IT résumés, but he only hires well- 
rounded people who fit the company 
and its values. 

Dow Jones has an average of 50 to 70 


ine HIRING 


These bonuses will be large- | 





IT openings at any time and is current- 
ly looking for database administrators 
(DBA), project leaders, application ar- 
chitects with expertise in high-volume 
Web platforms, network engineers, se- 
curity engineers and Windows NT sys- 
tems administrators. 


Creative Alternatives 

The tight job market is forcing em- 
ployers to pay more attention to reten 
tion programs, training and the culture 
and environment they offer workers. 

That is certainly true at 
TRW Inc. in Cleveland, 
where vice president and 
CIO Mostofa Mehrabani 
says his philosophy is, “We 
don’t ever want people to 
leave the company, or 
choose another company, 
because of compensation.” 

TRW also puts priority on job satis- 
faction and career development. 
Mehrabani recently took his company’s 
top 50 IT professionals to a custom- 
ized weeklong program at MIT’s Sloan 
School of Management. “We need IT 
professionals to be more than techni- 
cians. They need to be good process 
experts, have a passion for business 
and offer leadership,” he says. 

The tight job market is also forcing 
IT employers to rely more heavily on 
hiring foreign workers and outsourc- 
ing. For example, TRW just signed a 
$200 million, five-year agreement with 
Satyam Computer Services Ltd. in Hy- 
derabad, India, for systems develop- 
ment and system engineering support. 

“We are creating an electronic busi- 
ness community where we provide 
core and strategic IT capabilities and 


HOT JOBS 
FOR 2001 


Technical recruiters and IT hiring managers 
say this year's top fields for IT job opportu- 
nities, ranked according to demand for 
workers, will include the following: 


Systems integration/infrast 
Requires a strong understanding of the ie 
haviors of multiple systems as well as 
knowledge of the middleware involved in 
integration. - Mostofa Mehrabani, vice 
president and ClO at TRW 

Salary range: $70,000 to $140,000 





E-business architecture: People in this 
field need a working knowledge of Web 
tools and technologies, and more impor- 
tant, the ability to look at the big picture 
and develop the high-level planning and 
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services in-house and rely on strategic 
partners to develop other functions,” 
says Mehrabani. 

O’Neill says Getty Images is getting 
more creative in terms of putting to- 
gether global workgroups. 

“We have IT employees all over the 
globe — Sydney, London, Calgary,” he 
We don’t believe they have to be 
in a central location.” 


Getting a Life Back 


In response to long hours, high 


says. ~ 


stress and mounting responsibilities, 
IT professionals this year will be de- 
manding more flexible work arrange 
ments, predicts John Keast, co-founder 
and CEO of business-to-business mar- 
ket development firm Tasavo in Palo 
Alto, Calif., and former CIO at PG&E 
Corp. in San Francisco. 

“There is this morning-after feeling 
from what has been going on with the 
dot-coms, and the balance between 
work and play is going to become much 
more important,” “People 
have made phenomenal personal and 
They have 
stretched the work/home balance and 
are in a net loss situation, and it is go 
ing to be payback time for the family.” 

Keast says he’s practicing what he 
preaches. After earning a solid reputa- 
tion as always being the first to arrive 
at work, he’s now taking his daughter 
to school a couple of mornings a week. 
And he’s trying not to schedule intense 
work sessions at the end of the day, so 
he and his staff can go home and have 
dinner with their families. D 


Keast says. 


financial sacrifices. 


Leinfuss is aiiahlian writer in Sarasota, 
Fla. 


thinking to frame the problems and the so- 
lutions. - John Keast, CEO of Tasavo 
Salary range: $75,000 to $175,000 


Customer relationship management: 
Requires people who can capture cus- 
tomer information and build databases. 
They must have programming and data 
modeling skills as well as the business 
knowledge necessary to understand why 
they are capturing the information. - Frank 
Giannantionio, vice president of direct mar- 
keting systems at Limited Technology Ser- 
vices 

Salary range: $75,000 to $130,000 


Wireless technology: Offers opportuni- 
ties for people who can do wireless appli- 
cation development, build wireless net- 
working infrastructure or manage all the 
wireless personal digital assistants that will 
one day become part of the corporate net- 
work. - Barbara Gomoiski, research direc- 
tor at the Gartner Institute 

Salaries are high because IT profession- 
als with the required skills are scarce. 
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IT consuléaihts with Web ncetes d 
ment experience under their belts will bi 


pretty this year, as the demand for the 


increases dramatically. By 
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WALT SLOAN, PRINCIPAL at 
consultancy The System Smith, 
says functional expertise has 
paid off more than technical ex- 
pertise. He was able to raise 
rates by 25% in 2000, with an- 
other increase coming in 2001. 


Basic, raised his rates by 25% last 
spring and plans a 15% to 20% increase 
in 2001. Nonetheless, he says, his rates 
are lower now than five years ago 
when he ran a specialized consultancy 
selling accounting software. 

“Then, I was banking on my busi- 
ness analysis skills,” Sloan explains. “I 
was billing out at $150 to $200 an hour, 
but my part of the project was only 5% 
to 10% of the total, and my developers 
were doing the rest.” 

Sloan says he folded that company 
because he was burned out on the 
business side and found he prefers 
focusing on technology. Now, even 
though he charges less, he brings in a 
higher gross because he gets more bill- 
able hours. D 





Goff is a freelance writer in New York. 
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Predicting where the consulting market 
will be richest is like predicting snowfall in 
January. There’s sure to be a windfall, but 


no one knows where. 


Demand will stay 


high, but dot-com flameouts may flood the 
market with laid-off techs. By Leslie Goff 


S THE END OF 2000 ap- 

proached with doubt 

as to who would be 

occupying the White 

House, consultants 

said they were opti- 
mistic about demand for their services 
in 2001 but prepared for the possibil- 
ity that an unstable administration in 
Washington could create an uncertain 
economy. 

Without a doubt, Web-enabled 
customer relationship management 
(CRM) and supply-chain management 
systems will dominate application 
development opportunities, consul- 
tants say. Wireless applications will 
also play a significant role in consult- 
ing demand. 

Overall, consultants say they expect 
demand to continue to be high, but 
with the demise of many dot-coms, job 
competition should increase as well. 

“Predicting the demand next year is 
almost like predicting the Florida elec- 
tion,” says Marc Nolan, president and 
chief operating officer at IT consulting 
agency VAS International Inc. in 
Woodstock, Ga. “We did a survey six 
months ago and found a 0.04% unem- 
ployment rate among consultants in 
the high end.” 

VAS defines the high end as consul- 
tants who earn $75 and more per hour 


and combine “business logic with tech- 


nical know-how.” 
Nolan and others say they anticipate 
continued work for such high-end con- 


sultants, but those providing only tech- | 


nical expertise, such as systems and 
network administrators, may have an 


uphill battle this year as companies 
| turn to less expensive H-1B visa hold- 
| ers and application service providers 
| to handle those tasks. 
| Whereas dot-com companies were 
throwing money at consultants like 
| nobody’s business last year, demand 
| in that sector will all but cease — and 
consultants will likely be wary of those 
| gigs anyway, they say. 
| One independent consultant, who 


If companies want 
to stay competitive 


| and prepared for the | 


future... they'll 
| need consultants 
| because they won’t 
be able to find the 
talent full-time. 
They can use con- 
sultants and then 
| have that high ticket 
gO away. 


} JON HIGGINS, GENERAL MANAGER, 
| NEMETH/MARTIN CONSULTING 


OUREF IRE 
UNCERTAINTIES 


asked not to be identified, says his 
agency was stiffed for six-figure fees 
by one dot-com that tanked 

Nonetheless, Web-driven applica- 
tion development and integration of 
Web-based systems with legacy sys- 
tems should sustain a healthy indepen- 
dent consulting market, especially in 
midtier companies, notes Jerry Miller, 
president of Crescendo Technologies 
Group LLC, an IT strategy and con- 
sulting firm in Alpharetta, Ga. 

Miller says he expects a 20% to 30% 
boost in demand among midtier com- 
panies with revenue ranging from $200 
million to $2 billion, and “a lot of the 
growth we expect in the next few years 
is being driven by the wireless arena.” 

Hot technology skills for consul- 
tants in 2001 include Java, Oracle, 


| XML, Wireless Application Protocol 


and niche packages in the CRM and 
supply-chain management arenas, such 
as the software of I2 Technologies Inc 
in Dallas. 

Not surprisingly, demand for main- 
frame skills should be low. But func- 
tional expertise and soft skills are 
more important than technical skills, 


| agency recruiters say. 


To remain marketable, say con- 


| sultants and agency recruiters, inde- 


pendent consultants will need to hone 
their marketing and networking skills 
this year. “Traditionally, most of the 
tech people I see possess some arro- 
gance when they walk onto an engage- 


| ment,” Nolan says. “They have a sharp- 
| er edge, and it’s imperative to get some 
| soft skills.” Those skills will be key to 


landing repeat and word-of-mouth 


| business, which will be critical if the 


economy goes south, Nolan explains. 
Even if the economy does cool, 


| consultants with strategic functional 
| expertise in CRM and supply-chain 


management should fare well, says Jon 


| Higgins, general manager at Nemeth 


Martin Consulting Inc. in Danbury, 
Conn. The IT supply-and-demand gap 


| will continue to play in consultants’ 
| favor. 


“T don’t think that would have a big 


| impact, because if companies want to 
| stay competitive and prepared for the 
| future, they will need to pursue these 


projects. And they’ll need consultants, 
because they won't be able to find the 
talent full time,” Higgins says. “They 


| can use consultants and then have that 


high ticket go away.” D 





Goff is a freelance writer in New York. 
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Strategic use of technology has transformed 
a small North Dakota university into an 
education pioneer. By Kathleen Melymukz 


ALLEY CITY, N.D 
— A student 
teacher studying 
at Valley City 
State University 
(VCSU) took her 
class of elemen- 
tary students to a 
computer lab at their school. When 
she found that the computers weren’t 
working, she spent the next two hours 
fixing them. 
A recent VCSU graduate found her- 
self giving a technology tutorial to a 
grateful job interviewer. An English 


major was snapped up as a Web design- | 


er. A physical education major who in- 
terviewed for a teaching position was 
also offered a job as the school dis- 
| trict’s technology coordinator. 

The students’ IT skills are the result 
of a radical transformation at VCSU, a 
| smalf liberal arts college. “They have 
actually re-engineered their enterprise 
| around IT,” says Mark Luker, vice pres- 
ident of Educause, a nonprofit associa- 


| 
} 
| 
| 
| 


tion in Washington that works to in- 
crease technology use in higher educa- 
tion. “They have elevated IT and Inter- 
net-based education to the top of their 
campus strategic plan.” 

The result is a model for education 
— and business — of how the strategic 
use of technology can improve pro- 
cesses (teaching), boost the quality of 
products (graduates), reinvigorate em- 


ployees (teachers and staff), tighten re- | 
| come second nature to everyone on 


lationships with customers (prospec- 
tive employers of graduates), forge 
links with the community and ulti- 
mately transform the organization. 

It all began in the early 1990s, when 
the small college was facing a 25% 
drop in the number of seniors coming 
out of state high schools. 

“We needed to differentiate our- 
selves big time,” says VCSU President 
Ellen Chaffee. “We needed a strategic 
advantage.” The university decided to 
become a pioneer in the instructional 
use of technology. Today, it’s one of 
the most wired colleges in the U.S., 





and that has changed everything. 
Surrounded by miles of some of the 
richest farmland in the world, the red 


brick spires of VCSU’s campus contrast 


with the flat landscape of southeastern 
North Dakota. Even greater is the con- 
trast between the Victorian buildings 
— replete with antique ornamentation 
— and what they house: a “laptop uni- 
versity” with ubiquitous computing, at 
which the strategic use of IT has be- 


campus, from faculty and students to 
coaches and groundskeepers. “It’s like 
brushing your teeth,” says Les Wong, 
vice president for academic affairs. 

It wasn’t easy. VCSU CIO Joe Tyk- 
winski recalls that by 1995, the teachers 
had several years of technology train- 
ing by virtue of a grant from the Bush 
Foundation in St. Paul, Minn., which 
provides faculty development awards 
to area colleges. 

VCSU was bursting with ideas that 
had nowhere to go because the hodge- 
podge of technology on campus was 
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unworkable. There were obsolete Mac- 
intoshes and PCs, different versions of 
various operating systems, and all 
kinds of academic and administrative 
software. There were three computer 
labs, several piecemeal networks, nu- 
merous e-mail systems and no Internet 
connections. 

“The current model would not sup- 
port the kinds of things the faculty 
wanted to do,” Tykwinski says. The 
university knew that the answer was 
to overhaul the entire infrastructure. 

But there were huge monetary 
obstacles. North Dakota ranks 49th 
among the 50 states in per-capita 
spending per pupil in higher educa- 
tion, and there was no new money. 
The only way to finance the ubiquitous 
computing initiative was to shuffle pri- 
orities, reallocate funds internally and 
win additional grants. 

And because VCSU was only the 
second university to “go laptop” — the 
first was the University of Minnesota 
at Crookston — “we had to invent al- 
most every decision as we went along,” 
Chaffee says, “and we could only go on 
faith that it would be worth doing.” 
More than 30 universities have since 
followed VCSU’s lead. 

The university also had to believe 
that students would come. There was 
no way around charging a $950-per- 
student laptop fee, which would raise 
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Dianne Wood, an associate professor | 
| Martin Luther King Jr. via the Web. 


the cost of attending the school by 
nearly 50% for a community without a 
cent to spare. Chaffee knew that the 
fee could decimate enroliment, but 
there was no alternative. She held her 
breath and, remarkably, enrollment 
didn’t fall. 


Re-engineering the Classroom 

By 1996, virtually every classroom, 
public area and dorm room had been 
wired, providing universal access to a 
standard platform that includes the 
campus network, the Internet and a 
host of peripherals, from big-screen 
TVs to microscopes. Every student and 
teacher received an IBM ThinkPad. 

Like businesspeople who re-engineer 
processes to take advantage of new 
technology, VCSU faculty members 
had to rethink how they taught. Like 
many innovations, the technology ini- 
tiative slowed down processes in the 
beginning, as teachers saw class time 
eaten up by technology instruction and 
minor snafus. But things began to gel, 
and the results have been revolution- 
ary, if sometimes unexpected. 

Linda Whitney, an associate profes- 
sor of art, recalls how early technical 
problems changed classroom dynam- 
ics as teachers and students worked to- 
gether to get it right. “It became more 
of a partnership, as opposed to ‘I’m the 
expert; you're the learner,’ ” she says. 











of business, says her textbooks have 
been replaced by the Sloan Manage- 
ment Review and The Wall Street Jour- 
nal Interactive Edition. “They don’t 
have to read case studies secondhand,” 
she explains. “They’re using the actual 
references to write their own.” 

Instructor Jane Hammer, who 
learned programming by copying code 
off a blackboard and going to a com- 
puter lab once a week to see it run, 
now has her computer information 
systems (CIS) students type code into 
their laptops as she talks, “to see 
whether what I said really works.” 

“My Islamic art students can travel 
through the Dome of the Rock and 
hear the music and language all at 
once” on a Web site, says Whitney. “I 
teach people to make Web pages, and 
in every section, I'll have someone 
who says, ‘Now I have power!’ ” 

Nearly half the courses are taught, at 
least in part, over the Web. Wood's 
class in entrepreneurship, for example, 
meets online half the time. Students 
are divided into groups of four and in- 
teract on discussion boards between 
weekly classes. 

“It’s not a traditional lecture/research/ 
write format,” says senior Maggie 
Clemens, who is majoring in English 
and business. “It’s more of a discussion: 
How can we all learn together?” 

While many universities are using 
IT in class instruction, says Luker, the 
technology is usually scattered in is- 
lands that may not communicate with 
one another, much like the IT “silos” 
still found at many companies. VCSU 
is different, he says, because IT is “a 
structured, strategic emphasis that 
runs throughout the organization,” just 
as it should be in the best companies. 

Students at VCSU say that technol- 


| ogy enables better education for all 


types of pupils. “Classes that would 
traditionally be lecture are turning into 
audiovisual and hands-on, which takes 
in all types of learners — visual, audi- 
tory and kinetic,” says Sara Banya, a 
history major. Her class recently lis- 


Valley City 

State University 
Founded: 1892 (as Valley Normal School) 
Location: Valley City, N.D. 


Major field of study: Liberal arts, 
especially education 

Tuition and fees: $2,223, plus a $950 
computer fee 


Annual budget: $7.4 million 


Annual cost of laptop progr2m: 
$1.5 million 




















| software 
| ing to measure the training costs we’ve 
| saved hiring Valley City students.” 





tened to a lesser-known speech by 


“Primary sources are within our grasp,” 


| she says. “It makes history tangible.” 


VCSU is also using technology to 


| improve student skills assessment by 

| means of mandatory “digital portfo- 

| lios” — CDs that leverage students’ 

| technical proficiency to illustrate their 


mastery of academic subject matter. 
A digital portfolio for an education 


| major, for example, might include a 
| Web page with a video of the student 


teacher giving a lesson, a video of his 
students working on a project with a 
voice-over explanation of the princi- 


| ples involved, a Word document of the 
| lesson plan with hot links to sources, a 
testimonial by the supervising teacher, 
| and the student’s transcript. “It says I 

| know more than what’s on my tran- 


script,” says senior Ben Bernard. 


| Seeing Results 


Thanks to its two-year computer re- 
placement cycle, VCSU students grad- 
uate with computer experience that’s 


| equal to or greater than that of their 
| employers, says Chaffee. “Our gradu- 


ate job placement rate is consistently 


| at or near 100%,” she says. 


The university works hard to ensure 


| that rate. It has established internships 


with Great Plains Software Inc. and 
uses the company’s products in its 
business and CIS classes. 

“When we interview a VCSU stu- 


| dent, we don’t focus on technology, 


because we know they know it,” says 

Gary Schafer, vice president for exist- 
ing customers at the Fargo, N.D.-based 
maker. “It would be interest- 


Teachers add that their use of tech- 


nology tools helps set the stage for life- 


long learning, and the university pro- 


| vides many examples. Everyone from 


administrators to security guards has 
received technology training, and 
everyone has access to a PC. 

Ron Pommerer, director of facilities 
services, has just begun computer- 
aided design training for his staffers, 
which will help them maintain the 
physical plant. Don Schaack, the uni- 
versity carpenter, shares a PC with fa- 
cilities services, but he says he hopes 
that won't be for long. “The more I 
learn, the more I want to learn,” he 
says. “I'd like to have my own laptop.” 

Chaffee says her ultimate goal is to 
bring technology-oriented business 
into the region and stop the outflow of 
talent that’s threatening a way of life 
she feels is worth saving. 

“Around here, we say, ‘Better leave 
the keys in the pickup. Somebody 
might need it, ” she laughs. Gesturing 
toward the small town beyond the 
campus and the farms in the distance, 
she adds, “This is the way America is 
supposed to be.” B 





OZMO.COM INC., the on- 
line convenience store 
that promises delivery 
of products to urban 
consumers within an 
hour, had been a dot- 
com darling since its 
founding in 1997 [Business, March 6, 
2000]. Private investments from ven- 
ture capital firms and Amazon.com 
Inc. were reported at $268 million 
Meanwhile, New York-based Jupiter 
Research projected that the home- 
delivery market would reach $3.5 billion 
in 2000. A major deal with Seattle- 
based Starbucks Corp. put a Kozmo 
brand presence in many of the popular 
coffee shops, and the online store 
expanded operations from its New 
York headquarters to 10 other cities. 

Then last spring, reality hit the stock 
market and troubles piled up for Koz- 
mo, including the following: 

# A high-profile CIO left two months 
after arriving. 

@ The CEO turned over daily operations 
to the chief financial officer. 

s Hundreds of employees received 
pink slips. 

@ Sales in 1999 of $3.5 million didn’t 
cover $26 million in losses. 

® Plans for further expansion were put 
on hold. 

® Analysts challenged its business 
model. 

Delivering an initial public offering 
(IPO) — which was delayed, then can- 
celed — proved a greater strain than 
bicycling through midtown Manhattan 


with a box of doughnuts. As Chris Sira- | 


gusa, Kozmo’s group vice president of 
technology, puts it, the rules suddenly 
changed. “Unfortunately, you have to 
play by [the market’s] rules,” he says. 
Were initial investors and onlookers 
foolish or simply caught by bad timing? 
“I wouldn’t be betting on [Kozmo],” 
says Tim Laseter, vice president in the 
operations practice at consultancy 
Booz Allen & Hamilton Inc. in 
McLean, Va. “There are some big eco- 
nomic challenges in the business con- 
cept of same-day delivery.” Deliveries 
are expensive to perform, so orders 
must be large enough — with high 
enough margins — to cover the costs 
and ultimately provide profit, he adds. 


MISUNDERSTOOD? 


Kozmo can’t leverage technology to 
the same extent as companies such as 
Amazon.com and Walmart.com, the 
online unit of Wal-Mart Stores Inc., 
says Greg Kyle, president and CEO of 
Pegasus Research International LLC in 
New York. That’s because as its busi- 
ness grows online, it must hire more 
people to deliver goods in the real 
world. “The more customers they ac- 
quire, the more deliveries they make, 
[and] the higher their costs go,” he says. 

Skip Trevathan, Kozmo’s chief oper- 
ating officer and former managing 
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Officer Skip Trevathan have been weathering challenging times since last winter. 


FALLING 
DOT-COM 
STAR 


Online convenience store Kozmo.com hasn't 
had an easy year since raising millions in 
venture capital, thanks to stock market woes 
and executive changes. But give us time, 
the company says. By Erik Sherman 


director of North American logistics 
at Memphis-based FedEx Corp., says 
many observers don’t understand Koz- 
mo’s business mechanics. Most deliv- 
ery scheduling and routing systems — 
even those used by FedEx and UPS — 
assume a 12- to 24-hour window be- 
tween order placement and actual de- 
livery. In contrast, Kozmo has just five 
to seven minutes to pinpoint the deliv- 





ery round (a bicycle trip with Kozmo 
products) that will carry an order. The 
tight requirements also offer opportu- 
nities for logistics systems that can bal- 
ance delivery loads, expected vehicle 
traffic and weather conditions, he says. 
“There is a point that technology 
will reach its optimum efficiency 
gains,” says Trevathan. “We are [a] 
long, long way away from even ap- 
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proaching ... that.” Since going live 
last year with systems developed 
in-house, orders per delivery have 
climbed from a little more than one to 
about 2.2, he adds. In fact, 275 delivery 
and warehouse workers were laid off 
because the company was able to 
reduce staff and consolidate ware- 
houses in Los Angeles and New York 
while deliveries continued to increase. 
“What we did was nothing more 


| than what mature businesses would 
| call rightsizing,” says Trevathan. Yet 


scrutiny continues. Delivery efficien- 
cies don’t explain later layoffs of sev- 
eral dozen employees from company 
headquarters. Kozmo was involved in 
talks to acquire a former rival, New 
York-based Urbanfetch.com Inc., but 
dropped the plans after months of on- 
again/off-again negotiations. A lawsuit 
alleging discrimination in its delivery 
services in Washington was dismissed. 
In today’s market, investors, banks 
and analysts have little patience for 
e-businesses. “There was a euphoria 
and feeding frenzy [in the market] that 
went on for about two and a half or 
three years. All of a sudden, it was like 
waking up from a bad drunk,” says Tre- 
vathan. He insists that investors, man- 
agement and employees are still com- 
mitted and that Kozmo will be prof- 
itable in two to four of its most estab- 
lished markets sometime this year. 


PROFITABILITY IN SIGHT? 
The final arbiter of success is likely 
how quickly Kozmo can become prof- 


itable and whether management can 
| conserve cash well enough to last until 


then. Kyle says he sees little chance of 
an IPO anytime soon. “To really be a 


| sustainable public company, they 
| should be able to demonstrate several 
| hundred million dollars in sales for a 


“It’s doubtful whether you have that 
opportunity here in the U.S.” 

Bob Greene, a managing partner at 
New York-based Flatiron Partners, one 
of Kozmo’s investors, says he dis- 
agrees. “It’s in its early days and, I sus- 
pect, will come up with a model that 
works in lots of different kinds of mar- 
kets just in the U.S. itself,” he says. For 
example, the company might cover 
some suburbs with once- or twice- 
daily deliveries to extend its reach. He 
also points out that this month, Kozmo 
is adding a $2 delivery charge for each 
order below the $25 to $30 range. The 
fee is expected to raise $20 million to 
$25 million and will remain in effect 
until the company becomes profitable. 

Trevathan says he remains confi- 
dent. “I didn’t move from Memphis, 
Tenn., to Manhattan thinking I would 
be done in six months,” he says. DB 





Sherman is a freelance writer in 
Marshfield, Mass. Contact him at 
esherman@reporters.net. 
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FINANCIAL & BUSINESS CONCEPTS IN BRIEF 


Business Process 
Outsourcing 


DEFINITION 


Business process outsourcing occurs when an organization 
turns over the management and optimization of a busi- 
ness function, such as accounts payable or purchasing, 
to a third party that conducts the activity based on a set 


of predetermined performance metrics. 


BY JULEKHA DASH 
ANY IT pro- 
fessionals are 
familiar with 


the term busi- | 


ness process 


outsourcing (BPO), but know- | 


ing how to distinguish it from 
other types of outsourcing re- 
quires some scrutiny — some- 
what like discerning between 


two political candidates with | 


similar campaign messages. 


Though some forms of BPO | 
| able and human resources ac- 
tivities under a 10-year, $1 bil- 


may include both IT manage- 


ment and business operations, | 
primarily | 
about turning over functions | 
such as payroll, accounting, | 
billing or even real estate man- | 


the approach is 


agement to a third party. 
Though these business 

processes may depend on IT, 

they are separate functions 


from core IT operations, such 

as data center activities or net- | | 
Dataquest, the worldwide BPO 

| market is expected to triple by 

| 2004, reaching $301 billion. 

It’s important for companies | 


work management. 


Different Skill Sets 


David Schnitt, CEO of Led- | 
gent Inc., a finance and human | 
tencies compared with activ- 


resources outsourcing provi- 


der in Torrance, Calif., says the | 


skills required to manage tech- 
nology are different from those 
needed to manage business 
processes. An IT outsourcer 
focuses on IT life cycle man- 
agement and PC_ uptime, 
whereas a BPO vendor man- 
ages people and processes. 
That’s why vendors 


pay 


strong attention to employee | 


transitioning” when they man- 
age a firm’s business process- 


es, says Rebecca Scholl, an | 
| of corporate development at 


analyst at Dataquest in San 


Jose. “A vendor should have a | 


strategy for the people [it’s] re- 
placing, a change-management 
strategy,” she says. 

The same holds true for the 
customer company. For in- 
stance, Charlotte, N.C.-based 
Bank of America Corp. ap- 
pointed Mary Lou Cagle to 
head its business transfor- 
mation efforts when it signed 
a memorandum of understand- 
ing with Irvine, Calif.-based 


Exult Inc. last October to man- | 


age the bank’s accounts pay- 


lion agreement. 
Part of Cagle’s responsibili- 
ties involves putting together a 


team including representatives 
from both the bank and the | 
| outsourcing firm. 

As evidenced by Bank of | 
America’s contract with Exult, | 
BPO is big business — and | 


getting bigger. According to 


to recognize their core compe- 


ities that could be handled 
more efficiently by a third 


| party, says Charles Kafoglis, a | 
Pricewaterhouse- | 


partner at 
Coopers in New York. 

For example, 
functions such as payroll or ac- 
counts receivables aren't likely 


| to “make or break” a company, 


so it might make sense to farm 
them out if someone else can 
support them more effectively, 
says Kafoglis. 

Mark Hodges, vice president 
that Global 500 


Exult, says 


| cies, 


receivables in a 


choose to outsource business 
and 
build a function like accounts 
short 
back 


processes to cut costs 


time. 


“They need a office 


| cheaply and fast,” she says. 


Large companies, on the oth- 
er hand, traditionally choose 
BPO to improve their efficien- 
Scholl. 
America, for instance, is hop- 


says 


| ing that Exult will streamline 


firms spend between $50 mil- 
lion and $100 million per year 
in a typical BPO deal. 


Hard to Quantify Savings 
Quantifying savings from 
BPO deals can be difficult, 
according to Albert Nekimken, | 
an analyst at Input in Chantilly, | 
Va. More often, companies 
outsource to streamline pro- | 
cesses, save time or leverage 
the strengths of third-party 
specialists. If a company does 
find savings, they’re usually in 
the 10% to 15% range, he says. 
Scholl says small companies | 


its human resources function 
by creating a self-service por- 


tal for the bank’s 150,000 em- 


ployees during the next 18 
months, according to Cagle. 
Self-service human __ re- 
sources applications enable 
employees to access and up- 
date their personnel and bene- 
fits information online without 
having to involve human re- 


| sources staff. Officials at the 


$672 billion bank say they ex- 
pect the deal to cut its annual 
human resources and accounts 


| payable costs by 10%. 


Certain trends may prompt 


Bank of 


firms within a given industry 
to outsource business process- 
Nekimken. For in- 
stance, consolidation within 
the banking industry may 
make it easier for a bank to out- 
human 
activities rather than integrate 
data from the parties with 
which it merged or acquired. 


es, Says 


source its resources 


Strategic Outsourcing 

A company’s decision to out- 
source a business process typi- 
cally supports a larger busi- 
ness strategy, says Nekimken. 
For example, prior to announc- 
ing its BPO deal with Exult, 
Bank of America had an- 
nounced a corporate restruc- 
turing, including plans to lay 
off as many as 10,000 employ- 
ees and expand its investments 
in three technology areas. 

As the bank continues to re- 
structure, and 
Web-enabling its human re- 
sources should give it added 
flexibility, says Nekimken. D 


outsourcing 





back-office | 





Expl of Busines Pres Outsourcing Deals 


October 2000 


April 2000 


November 
1999 


November BP Amoco, 


1999 


N 


Exult, Bank of America 


Nortel Networks, 
PricewaterhouseCoopers 


General Motors, 
Arthur Andersen 


PricewaterhouseCoopers 


# 8 . mi 


Companies are still negotiating a $1 billion, 


10-year deal. Bank of America will acquire 5 mil- 
lion shares of Exult stock and an option to pur- 
chase another 5 million shares. About 800 to 900 
of the 1,000 people working in the bank’s human 
resources department will have jobs at Exult. 


PricewaterhouseCoopers manages payroll, 
human resources, accounts payable, employee 


training and other operations in a five-year deal 
for an undisclosed amount. About 1,000 Nortel 
Networks’ employees were transferred to Price- 
waterhouseCoopers’ BPO service centers. 


Arthur Andersen was awarded a $250 million 
deal to manage administrative accounting duties 


and help GM upgrade its legacy payroll systems 
to PeopleSoft Human Resources. Four hundred 
GM employees were given the option of work- 
ing at an Arthur Andersen service center. 


BP and PricewaterhouseCoopers signed a $1.1 


billion, 10-year deal to outsource accounting and 


SAP financials; the consulting firm also acquired 
BP’s application systems group. About 1,200 BP 
employees joined PricewaterhouseCoopers. 
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@ business hosting 


IBM E-BUSINESS HOSTING™ DOES MORE THAN MANAGE YOUR WEB SITE — WE 
HELP YOU PREPARE FOR THE GRUELING REALITIES OF DOING BUSINESS ON 
THE WEB. OUR STRESS-TESTING CENTERS ANALYZE YOUR SITE — BEFORE 

IT GOES LIVE — TO VERIFY THAT IT CAN HANDLE ANY MASSIVE SPIKES THAT 
COME ITS WAY. AND WE CONTINUE TO TEST AND MONITOR YOUR SITE ONCE 
IT’S ONLINE TO IDENTIFY POTENTIAL PROBLEMS —- SO THEY 

DON’T TURN INTO YOUR CUSTOMERS’ PROBLEMS. 

E-BUSINESS HOSTING. ONLY FROM IBM. 





Cail 1 800 IBM 7777, ask for host or visit ibm.com/e-business/hosting 
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Before Saying ‘I Do, 
Think About Divorce 


ONTRACT NEGOTIATIONS SHOULD BE forward-looking by na- 
ture. As two parties contemplate beginning a business relationship 
or extending an existing one, they usually spend adequate time an- 
ticipating future events and defining the parties’ specific rights 
and obligations at that time and under present circumstances. But there’s 
often little thought given to what will happen when the relationship ends. 
Focusing totally on the honeymoon can lead to unpleasant surprises later 


when the relationship draws to a close 


In many agreements, the IT 
vendor agrees to provide 
some sort of transition ser- 
vices when the contract ex- 
pires or is terminated early. 
The description of these tran- 
sition services is often vague 
and full of such phrases as “to 
be mutually determined.” 
Such words are obviously 
drafted under the assumption 
that all is well and that both 
parties will have the same ob- 
jectives at the end of the con- 
tract. But one thing you won't 
have for sure during the un- 
winding of the deal is any ne- 
gotiating power. 

Lest we forget, customers 
are especially vulnerable 
when they agree to place 
themselves in dependent rela- 
tionships with vendors that 
are trying to maximize their 





uit 
Exchange Tap CED 


Kent Dolby has been named presi- 
dent and CEO of Elemica, an online 
marketplace founded by several 
large chemical companies. Dolby is 
a 26-year veteran of Andersen Con- 
sulting in Chicago and recently 
served as president and CEO of 
PaperExchange.com Inc. in Boston. 

















Wire Service Teams 
With Hewlett-Packard 


NTT DoCoMo Inc., a Tokyo-based 
wired and wireless carrier, an- 
nounced a joint research effort with 
Hewlett-Packard Co. last month to 
provide multimedia content and oth- 


profits at customers’ expense. 
From the vendor's perspec- 


tive, end-game vagueness is an | 


ally because it leaves the ven- 
dor committed to very little. If 
you accept such vagueness, 
you subject yourself to uncer- 
tainty and risk in a dependent 
relationship at a very critical 
time — when you could be 
changing vendors or bringing 
an outsourced function back 
in-house. 

Don’t forget: When you're 
about to become a former cus- 
tomer, vendors seem to lack 
enthusiasm and an incentive 
to make you whole and happy. 

Of course, the best available 
approach is to insist on a well- 


defined exit strategy as part of 


the contract. The best time to 
negotiate how a relationship 
will end is before it begins, 


| er applications over fourth-genera- 
| tion wireless networks that the 
| companies are calling MOTO-Media. 


Third-generation networks, with 
projected bandwidth of 370K 
bit/sec., are still years away in the 


| U.S., although such speeds might 


be available this year in Japan, 

where NTT DoCoMo offers i-mode 
wireless Internet service. Fourth- 
generation wireless is expected to 


| roll out in 2010. 





| Microsoft VP Moves 
To Special Projects 


| Microsoft Corp. Senior Vice Presi- 
| dent Joachim Kempin will leave his 


job managing the company’s Win- 
dows OEM division and on July 1 
will begin overseeing special proj- 


| ects for Microsoft CEO Steve 


Balimer. Kempin, who has worked 


even if it has been fairly good. 


when you still have negotiat- 
ing power and vendors are 
still trying to accommodate 


| your wishes. Obviously, your 


vendor is most likely to agree 
to a favorable exit plan for you 
when it’s trying to win your 


Insist on an 
exit plan in any 
negotiations 
with your 
potential 
suppliers. 


at Microsoft for 17 years, was a key 
witness during the U.S. govern- 
ment's antitrust suit against Mi- 
crosoft. Richard Roy has been 


| tapped to fill Kempin’s old position. 
| Roy, who has been at Microsoft 

| since 1997, is currently general 
manager of Microsoft's German 

| subsidiary. 


‘FedEx ClO Carter 
' doins Asera's Board 


business — not when it’s los- 
ing it. Always insist on an exit 
plan in any negotiations with 
your potential suppliers. Re- 
gardless of the exit circum- 
stances, such as normal con- 
tract termination, termination 
for cause or termination for 
convenience, a smooth transi- 
tion plan should be a negotia- 
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tion. Many vendors try to re- 
quire customers to make re- 
maining payments when they 
want out of deals early. But 
you don’t have to do that. Ne- 
gotiate a descending termina- 


| tion charge clause that states 


that the amount you must pay 
to get out of the deal declines 
with each passing month. Ne- 


tion priority. 
A well-scripted 


| transition should 


describe the con- 
ditions under 
which the exit 
plan is to be im- 
plemented, along 


with each party’s 


duties, roles and 
responsibilities. 
All costs that are 
to be shouldered 
by either party 
should be clearly 
identified and 
quantified in as 
much detail as 
possible. Owner- 
ship of everything 
should be clearly 
delineated. Some 


JOE AUER is president of 
International Computer 
Negotiations Inc 
(www.dobetterdeals. 


com), a Winter Park, Fla., 


consultancy that edu- 
cates users on high-tech 
procurement. ICN spon- 
sors CAUCUS: The Asso- 
ciation of High-Tech Ac- 
quisition Professionals. 

Contact him at 
joea@dobetterdeals.com 


gotiate aggressive- 
ly on these 
charges before 
signing the con- 
tract — that’s your 
only chance. 

You may never 
need to exercise 
this option, but if 
you do, it could 
save you millions 
of dollars. 

The exit plan 
should also identi- 
fy how any 
changes can be 
made since busi- 
ness conditions 
may change over 
time. Periodic re- 
views of the exit 





Robert Carter, executive vice presi- 


| dent and CIO at FedEx Corp. in 

| Memphis, has joined Asera Inc.'s 

| board of directors. Belmont, Calif.- 
| based Asera is a provider of e-busi- 
| ness services and products. 


Carter joins a board that was ex- 
panded last month with the addition 
of former Oracle Corp. President 
Ray Lane. 





of the ownership 
issues are obvious, but some, 
like data, system modifica- 
tions and improvements, sub- 
contractor relationships and 
magnetic storage media, often 
get overlooked. 

In deals that require a sub- 


| stantial vendor investment at 


the outset, such as leasing and 
outsourcing transactions, it’s 
fair and reasonable for the 
vendor to expect some com- 
pensation with early termina- 


plan should be 
part of the rela- 


| tionship manager’s responsi- 
| bilities — for the customer 
| and the vendor. 


While the exit plan doesn’t 


need to be overly complex, it 
| must address the key issues of 


who will do what and when, 


| plus the costs involved. 


Without an exit plan, the 
euphoria of establishing a new 
relationship can turn into 


| chaos when it comes time to 


part company. D 





Closed for Business 


More than 130 dot-coms went out of business in 2000, according 
to San Francisco-based Webmergers Inc., an online marketplace 
for buyers and sellers of Web properties. In fact, 43 shut down in 


October and November. Following 


are the top reasons why cus- 


tomers stop visiting Web sites, according to WebMergers.com: 


® Difficulty accessing/navigating site 


@ Slow site performance 


@ Web site down 


@ Inadequate online customer service 


® Slow or no response to e-mail inquiries 


@ Lengthy or complicated product-return 


process 


= Negative experiences of friends or family 
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TRAFFIC COPS 


To keep its network run- 
ning smoothly as it in- 
stalls a new shipping 
system, Bose has turned 
to quality-of-service 
technology to ensure that 
the right applications get 
top priority. » 48 





A WHOLE LOTTA 
DATA GOIN’ IN 


IBM and Seitel, a com- 
pany that sells seismic 
data to oil companies 
for use in exploration 
activities, are develop- 
ing a storage-area net- 
work that’s supposed 
to make more than a 
petabyte of the infor- 
mation available via 
the Web.» 48 





SECURITY 
JOURNAL 


How do you manage 
user requests for lost 
passwords? In Jude’s 
large, distributed com- 
pany, figuring out how 
to authenticate the re- 
quester becomes a secu- 
rity conundrum — until 
someone finds a simple 


fix.» 49 





EXEC TECH 


Sometimes, what was 
written in an informal 
e-mail in the heat of the 
moment doesn’t look so 
good when your compa- 
ny is under a litigator’s 
microscope. What you 
may need is disappear- 
ing e-mail from a San 
Francisco firm called 
Disappearing Inc. » 50 





FUTURE WATCH 


Hydrogen fuel cells 
have been around for 
more than a century, but 





there wasn’t a market 
for the technology until 


now. With the advent of | 


wearable computers, 
and with transportation 
companies looking to 
cut polluting emissions, 
the most basic element 
in the universe may be- 
come the energy source 
of the future. » 51 


QUICKSTUDY 


Nowadays, we use mul- 
tiple type fonts with 
ease and often reckless 
abandon. But what ex- 
actly is a font? And what 
about all those other 
terms that go along with 
fonts, like glyph, kerning 
and serif? Find out more 
in this week’s concise 
primer. » 54 


EMERGING 
COMPANIES 


Voice portal technolo- 
gy from start-up Conita 
Technologies lets mo- 
bile users check their 
calendars, receive alerts 
and “read” e-mail by 
telephone using voice 
commands. The tech- 
nology is innovative — 
but security is one of 
its weaknesses, and the 
company may soon 
face competition from 
Microsoft and IBM.» 55 














BUSINESS AND IT 
BALANCING ACT 


Ed Smith is represen- 
tative of the growing 
trend of “business tech- 
nologists” — IT profes- 
sionals who have also 
mastered the business 
strategy side of the 
house. To be effective 
in the role, he must 
constantly hone his 
business, technology 
and communication 


skills. » 56 








CHNOLOG 





SECURITY IN THE 
WIRELESS WORLD 


AS MORE USERS carry wireless devices and demand access 
to corporate networks and e-commerce sites, security 
is becoming a big issue. Some security options are 
available today, but gaps remain. Before wireless 
e-commerce or even wireless access to 

the corporate network takes off, organi- 

zations are going to have to secure their 

wireless connections. 





Opera Introduces Free 
Version of Browser 


The Opera 5.0 Web browser for 
Windows, the best-known competi- 
tor to Netscape Communications 
Corp.’s Communicator and Micro- 
soft Corp.'s Internet Explorer 
browsers, is now available for free 
download from Oslo, Norway-based 
Opera Software AS at www.opera. 
com. Opera was previously available 
only to customers who paid $39 to 
download it, but this version is 
sponsor-supported and includes a 
single banner ad as a trade-off for 
being available free of charge. 


Microsoft Puts 
Whistler Into Beta 


Microsoft last month announced de- 
livery of the first beta release of an 
embedded version of its Windows 
operating system, code-named 
Whistler Embedded. The company 
said the design goals for Whistler 
Embedded were to deliver extensive 
componentization to provide more 
flexibility to appliance and device 
makers. 


E-Smith Adds VPN, 
Secure Mail to Server 


Boston-based small-business net- 
work software vendor e-Smith Inc. 
has added virtual private network 
(VPN) support and secure Web mail 
features to its Linux-based e-Smith 
Server and Gateway 4.1 software. 
The new version, which can be in- 
stalled on any Pentium-class PC, 
supports Point-to-Point Protocol 
over Ethernet used by some resi- 
dential Digital Subscriber Line ser- 
vices. It retails for an annual $595 
license. 








| at 





G-Log Updates 603 


Global Logistics Technology Inc. (G- 
Log) in Shelton, Conn., has released 
Version 2.5 of its Global Command 
and Control Center (GC3) Web- 
based Global Enterprise Transporta- 
tion system. The new release ex- 
tends the capabilities of the GC3 
application to incorporate freight 
settlement, including freight pay- 
ment, customer billing, accounts 
payable and accounts receivable, 
the company said. 
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Bose Tunes Network 
With QOS System 


BY JAMES COPE 


HEN he be- 
gan imple- 
menting an 
enterprise 
resource 


planning (ERP) system at Bose | 
Corp. last year, Rob Ramrath | 


| knew he was putting an addi- 
| tional burden on his company’s | 


network, one that could com- | 


the Framingham, 
based audio equipment manu- 
facturer, was unwilling to trade 


| new functionality for a net- 


work slowdown. 
So, before turning on the 


| new shipping system, Ramrath 
| implemented a quality-of-ser- 
| vice (QOS) system, which uses 


technology that thwarts laten- 


| cy and the resulting business 


| promise the new shipping sys- | 
| tem he planned to install a few 
| months later. 


| Quality-of-service technology helps audio 
equipment maker prioritize network traffic 


slowdowns by prioritizing net- | 
work traffic by source or appli- | 


cation. 

Ramrath spent $8,000 to in- 
stall QOS appliances 
from Waltham, Mass.- 
based Sitara Networks 
Inc. at each of two re- 
mote distribution cen- 
ters. He used QOS soft- 
ware to ensure that the 
ERP software and exist- 
ing applications such as 


| e-mail and Web brows- 
Ramrath, who is director of | 


| corporate information systems | 


Mass.- 


ing could coexist on the 
same network, while al- 
lowing the new ship- 
ping system to push or- 
ders, labels, picking, 
packing and dispatch- 
ing instructions to the 
distribution centers. 
“We stream transactions on 
a package-by-package 


distribution centers in Tolle- | 
son, Ariz., and Columbia, S.C.,” | 


IBM, Seismic Data Provider 


uilding Petabyte-Plus SAN 


BY LUCAS MEARIAN 


| tape that has to be loaded into 


At companies involved in oil 


agers such Fabio 
sometimes have to wait weeks 
for the arrival of historical geo- 
logic or seismographic data 


as 


| exploration activities, IT man- | 
Feneri | 


that can help pinpoint pro- | 


outdated. 


| spective drilling sites. As a re- | 


| sult,the information is often | 


“It’s one of the major prob- | 


ems with oil cc anies now,” | 
lems with oil companies now 


said Feneri, information sys- 
tems manager at Houston- 
based Agip Petroleum Co., 


which focuses on drilling in | 


the Gulf of Mexico. 
“What we do now is just re- 


| quest a map from the vendor 
| and select what [information] 
| we want to buy based on that,” 
| Feneri said. Eventually, he said, 
| the data provider delivers a 





Agip’s systems before the com- 
pany can start analyzing the in- 
formation and get on with the 
drilling. 


Easier Access Via the Web 


But Feneri said he’s hopeful 


things could improve if IBM | 


and Houston-based Seitel Inc., 
which maintains a 


database used by more than | 


400 petroleum companies, fol- 
low through on a plan to jointly 
develop a massive storage-area 


network (SAN) that will make | 


more than a petabyte of infor- 
mation available to users via 
the Web. 

The SAN is scheduled to be 
up and running in an initial in- 
carnation in the spring. Once 
the networked storage system 
is in place, IBM and Seitel said, 


| nected series 
| houses. 


seismic | 





Ramrath said. “If the 
WAN goes down, 
stops cold and instantly.” 

Ramrath’s concerns were ex- 
acerbated by the network’s 
thin client architecture. 

Smart, fast servers holding 
the applications and data at 


ters are connected over a WAN 
to relatively dumb display ter- 


| special-purpose 


WAN | 
| slows, shipping slows. If the 
shipping | 
| built-in caches — a setup that 


BOSE used a QOS system to ensure that a new ERP 
system didn’t slow down network traffic between 
headquarters (shown) and distribution centers. 


| Bose’s Framingham headquar- ; 
basis | 
over a [wide-area network] to 


minals at the distribution cen- | 


ters, an arrangement 


almost | 


oil companies will be able to | 
access seismographic charts, | 


geographical surveys and pho- | 


tos that will be stored ina con- | 
| build the kind of network they 


of data ware- 

Seitel CIO Bill Leakey said 
the SAN should contain 1 peta- 
byte of information by the end 
of the year, with plans calling 
for that capacity to eventually 
be doubled. But that will take 
time and could include a com- 
plete revamping of the storage 
network, he added. 

“We actually think it’s going 
to take about four years to to- 
tally implement the whole so- 
lution,” Leakey said. “We don’t 
expect to finish this project 


| with the same technology we 


started with.” For now, at least, 
the SAN will be based on 
IBM’s tape storage devices and 
its Shark enterprise storage 
system, with storage manage- 
ment software from IBM’s 
Tivoli Systems Inc. subsidiary. 

Jack Scott, an analyst at Eval- 
uator Group Inc. in Engle- 
wood, Colo., said the IBM/Sei- 
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certain to introduce latency. 

The Sitara appliances are 
computers 
that run on a Unix operating 
system, Ramrath said. They 
can be set from a central con- 
sole in Framingham to indicate 
what types of traffic on the 
Bose network have priority at 
any given time. 

Sitara’s QOS units also have 


keeps frequently used data 
stored on hard drives at the 
distribution centers and light- 
ens the load on the network, 
said Ramrath. 

Stan Schatt, an ana- 
lyst at Giga Informa- 
tion Group Inc. in 
Cambridge, Mass., 
said Sitara’s product 
works well in situa- 
tions where it can 
identify the type of 
network traffic by 
source, such as an In- 
ternet ad- 
dress. 

However, _ Sitara’s 
technology has a ways 
to go to compete with 
products from Packa- 
teer Inc. in Cupertino, 
Calif., and NetReality 
Inc. in Santa Clara, Calif. 
which can more readily classi- 
fy network traffic without 
knowing its point of origin, 
Schatt said. D 


protocol 


tel project could mark a turn- 
ing point in SAN scalability 
standards — provided that the 
two companies are able to 


envision. 

High-capacity online stor- 
age networks “are going to un- 
derpin an awful lot of the 
e-commerce activities in the 
future,” Scott said. “And this 
one will add a lot of credence 
to the [technology] if IBM can 
pull it off.” D 


The SAN Story 


® Seitel Solution, a joint venture 
between IBM and Seitel, is expected 
to eventually store as much as 

2 petabytes of data on a SAN. 

A petabyte is 1,024TB. if the entire 
U.S. Library of Congress were digi- 
tized, it would take up 10TB. 

™ More than 400 oil companies could 
access 20 years of oil exploration 
data over the SAN. hk 
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TECHNOLOGY 


Need a Password? 
Just Call the Help Desk 


A simple policy change on handling lost passwords 
solves a complex problem at Jude’s company 


ASSWORDS are a constant 

source of problems in my or- 

ganization. They’re irritat- 

ing, they’re obtrusive, they’re 

constantly being forgotten, 
and they don’t even provide a good lev- 
el of security. Long-term, I’m trying to 
replace our Windows pass- 
words with smart-card ac- 
cess, but until that happens, 
we've got to cope with pass- 
words. 

Our current problem is at 
our help desk. When Joe 
User forgets his password, 
all he has to do is call the 
help desk and they’il reset it 
for him. You have to offer 
this service — legitimate 
users are forever forgetting 
their passwords, and you 
have to have a way to let 
them back into the system. 

But what’s to stop me 
from calling the help desk 
pretending to be Joe User 
and getting someone to re- 
set his password and tell it 
to me? Not a lot — as long as I can con- 
vince them that I’m Joe User, they’ll tell 
me his password. They have to. 

Despite all the fuss you hear about 
choosing strong passwords, in my expe- 
rience, few attacks depend on exploit- 
ing passwords that are easy to figure 


out. Many attackers just call their tar- | 


get’s help desk and get them to do the 
dirty work. That’s called “social engi- 
neering;” it’s acommon attack strategy. 


Authentication Challenge 

To get around this problem, we need 
to get the help desk to make sure it only 
gives out passwords to the right people. 
In other words, we need to authenticate 
password reset requests. Well, we al- 
ready have a simple way of authenticat- 
ing users. We give them passwords — 
which they forget. Our help desk is 
much more professional about this than 
most, but it’s still a difficult problem. 

I’ve been looking for an easy, practi- 
cal solution to this problem for a while, 
but when I asked a large group of tech- 
nologists in our office for suggestions, I 
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| got all the predictable responses. 


We could identify them by their So- 


| cial Security numbers, but the numbers 
| are publicly available. We could make 


them go to the help desk with an identi- 


fication card, but some users work hun- | 
| dreds of miles away from the help desk. 


Get their managers to 
send e-mail? The man- 
agers won't stand for the 
added hassle, and it’s not 


that easy to keep track of 


who works for whom. 

The heart of the prob- 
lem is that there are only 
three ways to authenticate 
a person: by something 
you know (such as a pass- 
word), by something you 
have (such as an ID card) 
or by something you are 
(such as your facial fea- 
tures). So once your initial 
password) is forgotten, 
another shared secret — a 
backup password — or on 
one of the other two authentication 


mechanisms: something you have or | 


something you are. 


If a user forgets one shared secret he | 
| try every nonintrusive test it knew of | 
ber a backup password. The only ways | 
around that that I know of are writing it | 
| into the target network, giving it a new 


uses every day, he isn’t likely to remem- 


down or making it easy to figure out. 
Writing down passwords is a very bad 
idea: If you can read it, so can someone 


else. And if it’s easy to figure out (like | 


your Social Security number or moth- 
er’s maiden name), then it’s easy for 
someone else to figure out. 

So that reduces it to something you 


have or something you are. But unless | 
you're at a very small company, these | 


tend to be expensive solutions that are 
difficult to manage. 

This time, however, someone came 
up with a simple, practical, cheap solu- 
tion: Get the help desk to leave the new 
password on the user’s voice mail. 

Access to our voice mail is protected 
by a personal identification number 
(PIN), so access to a user’s voice mail 
should, in theory, be restricted to that 


| ing 
| (ISS) Internet Scanner this week, and 


shared secret (that is, the | 


you have to rely on either | 
scans IP addresses looking for servers, | 

| then identifies any visible security vul- 

| nerabilities on those servers. It’s ISS’s 





user. Of course, a user can easily forget 
his PIN, but the chances of him forget- 
ting both his PIN and his password at 
the same time are relatively low. And 
the slight hassle of having to access 
voice mail might make users think a lit- 
tle harder about their password before 
calling the help desk. 

Basically, it’s authentication based on 


another shared secret, but it’s one that | 


users should be able to remember if 
they use it often enough. This solution 
isn’t 100% secure, but it’s better than 
what many companies have (nothing), 
and it should be easy to implement. 


| Security Scanner Goes Live 


We ran our first live security scan us- 
Internet Security Systems Inc.’s 


everything went like a dream. For 
months now, we’ve been going through 
the process of getting the hardware, 
configuring policies, running test scans 
and convincing our engineering team 


to let us at their prized live networks. | 


The team finally accepted that the 
scanner wasn’t going to bring the live 
networks crashing down around its 
ears and gave us the access we needed. 
Internet Scanner is a simple tool that 


simplest and oldest product, and it’s | 


also its best. 


The scan took a total of 20 minutes to | 


on eight machines. Running the scan | 
was just a matter of plugging our laptop | 


IP address and pressing the start button 


on the scanner. That’s the sort of ease of 


use that I approve of. 
The application gave me a neatly for- 


matted report — available either on- | 
screen, in HTML or in Microsoft Word | 


format — detailing every vulnerability 


it found, the potential consequences of | 


each vulnerability and how to fix them. 
Of the eight machines on the network, 


two refused to let the scanner find out | 
anything about them at all — not one | 


vulnerability was found. The 


two | 


routers turned out to have just one vul- | 


nerability, which is a very good result. 
We also had three Windows NT ma- 
chines with a few technical vulnerabili- 
ties that we already partly knew about, 
but the real find was the eighth ma- 


| 
| 
| 
| 
| 
| 





THISWEEK SGLOSSARY 


X Window System: A multitasking, 
windowing graphical user interface pro- 
gram that runs on a Unix host for com- 
municating between X terminal devices 
and Unix host systems 


X terminal: A terminal connected to 
the X Window System that presents a 
window-based user interface to the 
user and allows the user to access mul- 
tiple applications at the same time 


SECURITYTECHCHECK 


For the more technical reader, here are 
the details of three security risks that 
our scanner identified on four of our 
systems, with information about how to 
remedy them: 


w A remote host shouldn't allow trusted 
access from the scanning machine 
This trust may extend to other inappro- 
priate machines as well. Examine the 
rhosts file and ensure that it contains a 
list of only those machines that should 
be trusted. 


w Open X Window displays allow an at 
tacker to capture keystrokes and to exe- 
cute commands remotely. Many users 
have their X server set to “xhost +,” per- 
mitting access to the X server by any- 
one, from anywhere. Either issue an 
“xhost -” command to deny access to 
everyone and selectively allow only 
trusted hosts to connect with xhost + 
commands, use a cryptographically se- 
cure authentication protocol such as 
xauth, or remove X Window: 


w The inverse query feature supported 
on some domain name servers (DNS) 
shouldn't be used. An attacker can use 
this feature to obtain a zone transfer. 
Zone transfers identify every machine 
registered with your DNS and can be 
used by attackers to better understand 
your network. The zone transfer occurs 
even if you've disabled zone transfers 
on your server. Configure your DNS to 
disable inverse queries. 


chine, a Sun Solaris box that was rid- 
dled with security vulnerabilities. In 
fact, the scanner showed two technical 
vulnerabilities in the box’s X Window 
System — and the owner of the box did- 
n’t even realize the X Window System 
was installed. 

The cooperative system owner and 
system administrator had the box fixed 
within hours — definitely a good result. 

Now we need to start ramping up our 
scanning efforts and covering more of 
our network segments. I hope they'll all 
be this easy. D 





® This journal ‘s written by a real security manager, whose name and employer have been disguised for obvious reasons. It's posted weekly at www.computerworld.com to help you and our security manager - let's call him 
Jude Thaddeus - better solve security problems. Contact Jude at jude.t@lycos.com or click on Computerworld.com’s Security Watch community forum to participate in discussion topics. 





TECHNOLOGY 


E-Mail 
Shredder 


This could be a hot ticket in our litigious society: 
e-mail that ‘expires’ and can’t be read or retrieved 
by anyone after a set date. By Barry D. Bayer 


OST comput- 
er users with 
some experi- 
ence treat 
e-mail with 

the informality of an untaped 

phone call. 


As Bill Gates and a host of 


lesser-known e-mail 
have discovered, this can be a 
big mistake. Increasingly, old 
e-mail, even internal e-mail, is 
likely to be used as evidence in 
a court case. Sometimes, what 
written in an informal 
e-mail in the heat of the mo- 


users 


was 


ment doesn’t always look so | 


good when your company is 
under a litigator’s microscope. 

Obviously, you 
e-mail, but deleted computer 
files have a nasty way of resur- 
facing. A lawyer looking for 
provocative e-mail will send in 
a forensic team to make image 


can delete 


copies of your company’s local 
and network hard drives and 
backup tapes and then scan 
| them for the proverbial “smok- 
ing gun.” What you may need 
is disappearing e-mail from the 
San Francisco firm that calls it- 
self Disappearing Inc. 


| Vanishing View 


Disappearing e-mail has two 


parts: a 300KB add-on to 
Microsoft Outlook 98 or 2000 
| on each user’s desktop, and a 
Disappearing Inc. key server 
that is accessible via the Web. 
| (A version for Lotus Notes is 
| due this quarter, but Notes 
users can read disappearing 
| e-mail messages that they re- 
| ceive.) Once the software is in- 
stalled on Outlook, the user 
will see a new tab on Outlook’s 
| Options menu and a “Send 
| Disappearing E-Mail” button 
when drafting a new message. 


When the message is ready 
to go, click the Send Disap- 
pearing E-Mail button instead 
of the usual Send button, and 
the message is sent like any 
Outlook message. 

When a recipient gets the 
message, it looks just like regu- 
lar e-mail except for a notation 
that the message will disap- 


pear after a given period. If 


read or 
reread the message after the 
expiration date and time, the 


anyone attempts to 


message says it has expired. If | 


a forensics expert tries to res- 


urrect the message from a 


backup tape or fragments of a | 


hard disk, he may find that a 


message was sent from 
person to another, but he won't 
be able to read it. 

If the recipient doesn’t use 
Outlook, the message arrives 
as a hyperlink attachment with 
a note about expiration. Click 
on the hyperlink before the ex- 
piration time, and the message 


one 


opens in your browser; after 
that, you’ll see a message that 
says your e-mail has expired. 
Disappearing e-mail can be 
installed minimum of 
$10,000 per year for 100 users. 
A Web-based policy module 
gives your system administra- 


for a 


the ability to determine who is 
required to use the system — 
all users or just specific people 
— and set a maximum period 
for which a message will be 
available. 

This module also lets users 
freeze the keys for all messages 


| or a selected group of mes- 


sages. This defeats the disap- 


pearing e-mail mechanism. 


However, it is useful if your | 
| company is hit with a subpoe- | 


na, or litigation becomes a pos- 
sibility, and your lawyers de- 
cide that e-mail is evidence 
and must not be destroyed. 
The desktop version of dis- 
appearing e-mail, which does- 
n’t offer policy 
available for free download at 
www.disappearing.com. 
Encrypt your e-mail with 
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traditional means, and a court 
might order you to provide 
your opponent with a key that 
lets him read those messages. 
But no key exists for disap- 
pearing e-mail once it has dis- 
appeared (see illustration, be- 
low). Neither sender nor recip- 
ient ever knows what the key 
is, and neither has any control 


| over it. And not even the ser- 


vice vendor can provide or re- 
construct a key. 


| Potential Holes 


There are a few potential se- 


curity holes: Recipients can 
tor several options, including | 


print e-mails before they ex- 
pire or copy and paste the text 


of unexpired messages into 


nonexpiring files. And attach- 
ments are never encrypted and 
never disappear. A version that 
permits encryption of attach- 
ments and prohibits printing 


| and copying and pasting is due 


in the next few months; it may 
include an “Oops” button that 
lets senders make messages 
disappear before they’re read. 
A routine e-mail destruction 
policy makes sense for many 
organizations. Disappearing 
e-mail enables you to imple- 
ment such a policy effectively 


and to know that when it’s 


| gone, it’s really gone. D 
options, is | ——<—< 


Bayer is an attorney in the 
Chicago area. He can be 
reached at Bayer@lawyer.com. 


Smoke, Mirrors and Blowfish 


When a sender clicks the Send Disappearing E-Mail button, the program contacts Disappearing Inc.'s Web site, 
obtains a randomly generated 128-bit key, encrypts the message using the Blowfish algorithm and places it into 
Outlook's Send queue for transmission. When someone attempts to read the message, the reading software 
requests a decryption key from Disappearing inc.’s server using the HTTP Internet protocol. When the key is 
received, the message is decrypted and the key is deleted. When the message expires, the vendor's server deletes 
the key and “scrubs” the disk location where the key was stored, making it very difficult and expensive — but 
perhaps not impossible - for anyone to ever read that message. 











bayer lawyer com 


D Wttps://s03.disink com/donut/jsprnewhtessage ssp 





Russell Kaybcomputerwor) 
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See | 


How re Things? 
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From, bayerbawyer com 
To. Russell _Kayscomputerwortd com 
ce 
Subject: The 8 Hour version with content 


Disappearing” Email has expired 





Now you see it... 


...and now you don’t. 
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rURE OF en 
production 
may had its 
beginnings in 1802, 
when Sir Hum- 


have 


phry Davy passed an electric 
current through water, 
ing it to decompose into hy- 
drogen and oxygen. He postu- 
lated that attraction 
held the two elements together. 

By 1839, a Welsh judge, Sir 
William R. Grove, had invented 
the first hydrogen fuel cell — a 
development that languished 
for the next 100 years. In ex 
periments leading up to his in- 
that 
hydrogen and oxygen could be 


caus- 


electric 


vention, Grove showed 


combined to produce water 
and an current. He 
wrote that the current 
be felt by five persons joining 
hands, and which when taken 
by a single person was painful.” 

Hydrogen, which is highly 
reactive, is usually found com- 
bined with other elements. Hy- 


electric 
“could 


drogen extraction and manage- | 


ment have been relatively ex- 
pensive and until 
now, no market has emerged to 
drive the development of the 
technology. But an unlikely 
combination of highly mobile 
computing and trans- 
portation may finally be creat- 
ing that market. 

Users of wearable comput- 


processes, 


mass 


ers need power — a source of | 
power | 


portable, lightweight 
that will last long enough to be 
useful. They need to drive 
their CPUs, their monitors and 
other peripherals, and 
that sucks the juice out of a 
rechargeable battery within a 
couple of hours. 

In the transportation indus- 
try, prototype buses are in ser- 
vice in cities as disparate as 
Chicago and Reykjavik, 
land. And German automaker 
DaimlerChrysler AG has intro- 
duced its hydrogen-powered 
Necar 4, which has a top speed 
of 90 miles per hour and a 280- 
mile tank capacity. 


Ice- 


Beyond the Mainstream 

These unusual mar- 
kets may be heading toward a 
future powered by hydrogen 
fuel cells more quickly than the 
mainstream is. 


niche 


Xybernaut Corp., one of the | 
main makers of wearable com- | 


puters, has introduced hydro- 
gen fuel cells manufactured by 
DCH Technology Inc. in Va- 
lencia, Calif., to power its Mo- 
bile Assistant IV. 

“Fuel cells can potentially 


all of 


TECHNOLOGY 


Back to 
Basics 


Hydrogen, the simplest element 
in the universe, may be the 
high-powered energy source 
of the future. By Jan Matlis 


A fuel cell is similar to a battery and runs a controlled chemical reac- 
tion, sometimes called a cold fire. It has a positive terminal and a neg- 
ative terminal, at which intermediate chemical reactions occur. The 
full chemical reaction is completed when an intermediate product 
diffuses from one side of a cell to the other and an electric current 
flows through an external wire connected between the terminals. 


Hydrogen flows past the anode, or negative terminal. A chemical 
reaction there extracts electrons from the hydrogen and leaves 
positive hydrogen ions, or cations. 


On the other side of the fuel cell, oxygen flows past the cathode, 

or positive terminal, where a reaction causes the oxygen mole- 

cules become negatively charged oxygen ions 

As a result of this process, electrons are drawn from the negative 

anode (where they were extracted from hydrogen) to supply the 
reaction with oxygen at the positive cathode. 


There are now positive hydrogen ions on one side of the fuel cell 
and negative oxygen ions on the other side. The two sides are 
separated by a membrane that only allows hydrogen ions, or pro- 
tons, to cross. Because they're positive, they're drawn to the nega- 
tive side, where they combine with oxygen to produce water. 


This is the same type of reaction as the one that occurred with a 
great deal of force when the hydrogen of the Hindenburg zeppelin 
met the oxygen of the atmosphere. But it’s controlled so that very 
little heat is produced and the energy given off can be channeled 
through a wire to drive electric machines. 


Laptop 


Anode, 
negative 
terminal 




















| 


| German 


prove [to be] an unlimited sup 

ply of portable power and may 
be the perfect solution to the 
currently limited life for bat 

teries used for portable elec- 
tronics,” says Edward G. New 

president and CEO of 
Fairfax, Va.-based Xybernaut. 
The company anticipates that 
a hydrogen fuel cell could keep 
a Mobile Assistant IV 
for 12 to 24 hours, he says. 


man, 


running 


This particular fuel cell was 
developed in cooperation with 
the Electronic and Electro- 
chemical Materials and Devices 
Group at Los Alamos National 
Laboratory in New Mexico. Its 
about the 
size of a standard 9-volt battery, 
including the hydrogen supply. 
The hydrogen canister is at the 
center of the cylinder and pro- 
vides the gas to stacked, disc- 
like fuel cells. 

Oxygen, which is the other 
fuel required for the cell, 
comes from the ambient at- 
mosphere outside the cylinder; 
this design also facilitates the 
small amount of cooling that’s 
required. The output of the cell 
is a little bit of heat, 
(which evaporates as it’s pro 
duced) and an electric current. 

Fuel cells are similar to bat- 
teries, except they require an 
external source of fuel, rather 
than an internal store of chem- 


design is cylindrical, 


water 


ical energy. 
about 40%, they’re much more 
efficient than internal combus- 
tion engines, which operate at 
about 13% to 25% efficiency. 
(About 75% to 87% of the gas 
burned in an internal combus- 


| tion engine in a car is not avail- 


able for making the car move.) 
In addition to the problem of 
extracting hydrogen, there are 
two other roadblocks to hydro- 
gen becoming a common ener- 


| gy source. 


One is distribution: Hydro- 
gen canisters aren’t on the rack 
next to the lithium batteries at 
the local pharmacy. 

Conrad Electronic AG, a 
electronics retailer, 
sells a hydrogen fuel cell for 
notebook computers that’s pro- 


| duced by another German firm, 
| the Fraunhofer Institute for So- 


lar Energy Systems. Empty hy- 
drogen fuel reservoirs, which 


| are removable parts of the cell’s 


flat design, may be exchanged 
at Conrad Electronic 
for full reservoirs. 

The combination of the fuel 
cell and reservoir offers longer 


outlets 


| life than the best lithium batter- 


ies. Also, there are no polluting, 


At an efficiency of 


) 


dead batteries to be disposed of 


The hope of hydrogen fuel 
; 
i 


cell developers is that as hy- 
drogen energy becomes a larg 
er part of the general ec 
obtaining full | 


voirs will be 


onomy, 
hydrog ren reser- 
as easy aS pur 


chasing conventional batteries 


The Hindenburg Dilemma 

rhe second problem hydro 
gen fuel cells must overcome 
summed up in two 
Hindenburg. When 
the zeppelin exploded in 1937 
while docking at Lakehurst, 
NJ., killing 36, the per- 
ception of hydrogen technolo 


can be 
words: the 
public 


gies was seriously 


Not many mobile- 


damaged. 
or wear- 
able-computer users would like 
to think of themselves as walk- 
ing Hindenburgs. Hydrogen is 
very explosive at 
tion as low as 4° 
nited by a mere static spark. 
On the other 
is 14 times lighter than air and 
dissipates very quickly. Even 
with the Hindenburg disaster, 
it’s thought that the 
cubic feet of hydroge 
zeppelin burned off in less than 
one minute and caused no fatal 
ities. Diesel fuel, 


a concentra- 


and can be ig- 


hand, hydrogen 


7 million 
*n in the 


also carried by 
the airship, was responsible for 
the deaths and continued fires 
after the original explosion. 

Retired NASA scientist Ad- 
dison Bain has suggested that a 
mixture of materials in the Hin- 
denburg’s cover 
compound that first caught fire 
from 
in the atmosphere. 
the hydrogen reservoirs are de- 
signed safely, the gas is safe as a 
fuel, says Bain. 

And NASA evidently 
that the technology is safe. All 
of the Gemini, Apollo and space 
shuttle missions have used hy- 
drogen fuels to generate elec- 
tricity and produce water. 

Ironically, it may be the bas- 
tions of internal combustion 
technology and vehicle manu- 
facturers that drive the devel- 
opment of hydrogen 
technology that will 
portable electronics. In 


produced a 
electrostatic discharges 


As long as 


feels 


energy 
benefit 
an ef- 
fort to develop more efficient 
and cleaner-running 
manufacturers have be- 
gun to turn to hydrogen. Most 
of the major automakers have 
hydrogen research groups. In 
the future, hydrogen technolo- 
gy could give new meaning to 
the anneal ‘gas station.” D 


automo- 


biles, 


Matlis is a freelance writer in 
Newton, Mass. 
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~ TECHNOLOGY 


Crossing 


the Wire 


CCUM 


Here's what's 
available for 
securing wireless 
connections 
today — and 
what's coming. 


By Alan Radding | 
SARE 


RGANIZATIONS 
have high hopes 
for wireless 
commerce. Bob 
Egan, an analyst 
at Stamford, 
Conn.-based 
Gartner Group 
Inc., calls wireless “the growth hor- 
mone for e-commerce.” But before 
wireless e-commerce or even wireless 
access to the corporate network takes 
off, organizations are going to have to 
nail down wireless security. 
It’s not that wireless isn’t secure as it 
stands now. “We are doing secure wire- 


less transactions today,” declares Philip | 


Wood, director of international wire- 
less at Charles Schwab & Co. in San 
Francisco. Rather, wireless security is 
difficult to implement, requiring orga- 
nizations to piece together myriad 


technologies. Few vendors offer a com- | 


plete security package, and large 
pieces of the security puzzle are beyond 
the control of corporate IT, resting 


instead with carriers and wire- 
less device manufacturers. 

Most organizations would prefer to 
support only a single security model 
for e-commerce, preferably the Inter- 
net model in use today, notes Jeff Reed, 
vice president of e-commerce consult- 
ing firm Logical, a division of London- 
based Datatec Ltd. E-commerce in the 
wired world today relies primarily on 
Secure Sockets Layer (SSL), which is 
used to transmit everything from per- 
sonal identification numbers (PIN) 
and passwords to credit card numbers. 

But when you try to move this 
approach to the wireless world, you 
immediately encounter problems, 
starting with cellular phones with 
Wireless Application Protocol (WAP) 
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Conversion presents a security 
problem. Wireless messages travel 
through the air to the carrier’s transmit- 
ter, where they are received and passed 
to a gateway that funnels them into the 
conventional wired network for trans- 
mission to the destination. At the gate- 
way, the WTLS message is converted 
into SSL. For a brief moment, the mes- 
sage sits unencrypted inside the gate- 
way, creating a security vulnerability. 

To some observers, this gap in en- 
cryption presents an intolerable threat. 
Others take a more practical view. 
“We're not losing any sleep over it,” 
says Wood. The messages spend only a 
few milliseconds in the clear on a ma- 
chine buried deep inside the carrier’s 
facility. “Somebody would have to 


capabilities. Unlike desktop and laptop | break into a carrier site and do a data 


computers or even personal 
digital assistants (PDA), 
WAP phones are pretty limit- 
ed when it comes to security 
and lack the CPU power and 
memory necessary for RSA encryp- 
tion, a key element of SSL. 
Encryption ensures confidentiality 
by preventing eavesdropping, and 
WAP devices include their own secu- 


rity protocol, Wireless Transport Layer 


Security (WTLS). This is equivalent to 
SSL but uses less-resource-intensive 
encryption algorithms, such as elliptic- 
curve cryptography (ECC). 

There’s nothing wrong with WTLS 
except that “it is not compatible with 
SSL,” which is the industry standard, 
notes Jeffrey Robinson, manager of 
corporate development at RSA Secu- 
rity Inc. in Bedford, Mass. So WTLS 
messages must be converted into SSL 
before an e-commerce site or corpo- 
rate network can read them. 





dump at that precise mo- 
ment,” he explains. 

Egg PLC is a wireless Web- 
based bank in London. To 
guard the gateway conversion 
from WTLS to SSL, it runs its own 
gateway internally. Each message still 
spends a moment in the clear, but it 
happens within the Egg facility. “The 
best solution would be SSL end to end,’ 
says Iain Hunneybell, Egg’s Internet 
customer authentication manager. 

Redwood City, Calif.-based Phone.- 
com Inc.’s Secure Enterprise Proxy 
achieves end-to-end security using SSL 
and WTLS, but it lets organizations 
avoid re-encryption at the carrier’s 
gateway by creating a WTLS tunnel 
that lets secure data pass through a 
network operator’s gateway without 
decryption. WTLS tunneling ensures 
that the data remains encrypted until 
it reaches its final destination. 

“The Phone.com approach lets you 








COMPUTERWORLD January 1, 2001 


TECHNOLOGY 


CHARLES SCHWAB’S Philip Wood says his firm is conducting secure wireless transactions and isn’t “losing any sleep” over encryption issues. 


get all the way to your application 
server,” explains John Pescatore, re- 
search director for Internet security at 
Gartner Group. 


No Denying PKI 


Encryption addresses part of the 
wireless security challenge. But it 
doesn’t provide the solid authentica- 
tion required for nonrepudiation, 
which is a mechanism that validates 
the information sender’s identity to the 
receiver so that the receiver can be 
sure the user is who he says he is. 

“For authentication and nonrepudia- 
tion, PKI, where certificates and keys 
are bound to the user, is the way to go. 
Everything is initiated through those 
keys,” explains Paul Mansz, vice presi- 
dent of architecture at Toronto-based 
724 Solutions Inc., a provider of wire- 
less e-commerce applications. Several 
public-key infrastructure (PKI) prod- 
ucts for wireless are starting to 
emerge, such as San Jose-based Certi- 


com Corp.’s MobileTrust. 

With PKI, organizations issue digital 
certificates to users to validate users’ 
identity. The certificate is encrypted 
and accompanies each transaction. By 
using the public and private key and a 
certificate authority to validate the 
certificate, authorized parties can 
decrypt the certificate to authenticate 
the user with greater assurance than 
can be achieved through PIN-based 
authentication. 

With this approach, however, a third 
party is needed to validate the digital 
certificate. Vendors that have intro- 
duced digital certificates include Certi- 
com, RSA Security, Entrust Technolo- 
gies Inc. in Plano, Texas; Baltimore 
Technologies PLC in London; and 
VeriSign Inc. in Mountain View, Calif. 

San Carlos, Calif.-based ePocrates 
Inc., a provider of handheld computing 
devices for physicians, opted for Certi- 
com’s wireless certificate security for 
its Palm-based applications. 


The combination of Certicom cer- 
tificate-based security and the more 
capable Palm device allows ePocrates 
to avoid the wireless gateway handoff. 

“We have true nonrepudiation end 
to end, all the way to the application- 
level security,” says Daniel Zucker, 
chief technology officer at ePocrates. 
With that level of security, ePocrates 
runs a drug prescription application 
that relies on Certicom’s mobile client 
certificates to authenticate the identity 
of the prescribing physician and lets 
the physician digitally sign the pre- 
scription right on the Palm device. The 
Certicom certificate uses ECC encryp- 
tion algorithms, which are smaller than 
RSA encryption algorithms. 

Schwab is taking another approach. 
It opted for a smart-card system from 
Stockholm-based cellular phone ven 
dor Ericcson Inc. and Gemplus SA in 
Gemenos, France, which provides the 
smart card, says Wood. In the system, 
currently being deployed in Hong 


Kong, the wireless device reads 
smart card, which carries the Schw 
customer’s private key and digital 
tificate. The customer then enters his 
account number and PIN 

The smart-card system allows 
nonrepudiation, but it’s available 
where there are Global System ft 
Mobile Communications (GSM) wire 
less networks. In the U.S., there are 
few GSM networks, thus forcing 
Schwab to use two different wireless 
security strate; > for the U.S 
and one for Asia and Europe 

When it comes to authentication 
wireless adds a disturbing wrinkle 
wireless phone can be easily stolen 
lost. If the owner’s digital certificate 
and key are in the phone, as a smart 
card or otherwise embedded, it pre 
sents an opportunity for considerable 
mischief. By combining smart cards 
with the requirement to separately 
enter a PIN, organizations can thwart 
such threats. But entering data such as 
account names and PINs on a cell 
phone “isn’t easy to do. We need sim 
pler approaches,” says Pescatore 
On the t 

One emerging security tool is bio- 
metric devices, which use unique phys 
ical identifiers such as voiceprints, fin- 
gerprints or retina images to positively 
identify the user. With biometrics, 
even if someone should steal your 
mobile phone, he wouldn't be able 
to imitate your voice or fingerprint 
“By 2004, we expect biometrics will 
have reached the price/performance 
level to allow it to be integrated into 
PDAs and cell phones,” Pescatore says 

Woburn, Mass.-based Keyware Inx 
offers a system that lets users register 
their voiceprints for authentication 
purposes. The voiceprints can be 
stored on a central server or on a 
smart card within the wireless device. 
At least one U.S. bank is testing Key- 
ware’s wireless voice recognition sys 
tem in conjunction with a smart card 
says Mik Emmerechts, Keyware’s 
director of U.S. operations, but he 
declines to identify the bank 

Many of the obstacles confront 
wireless security will disappear v 
the widespread adoption of thir 
generation wireless technology. The 
third-generation phones will be IP 
based and sport more processing 
power, memory and bandwidth, which 
will allow SSL security end to end, 
explains Matthew Decker, a consul- 
tant at Lucent Technologies Inc. in 
Murray Hill, N.J. 

By combining third-generation wire 
less with smart cards and bic 
organizations will finally have a uni 
fied security system that works for 
both the wireless and wired worlds. D 


ymetrics, 


Radding is a freelance writer 
in Newton, Mass. 
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Type Fonts 
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( \ 


Type font is the generic term 
applied to a set of printable or 
displayable text characters in 
a specified typeface family or 
design (such as Times New 
Roman), a given style (such as 
bold or italic) and a single size 
(such as 10 points). 


BY RUSSELL KAY 
NTIL 1984, the 
term font had 
meaning only to 
graphic design- 
ers, publishers 

and those for whom printing 

meant big presses, not desktop 
peripherals. Those of us who 
back then 
to seeing rather 
crude, monospaced letters and 
numbers on our computer 
screens and producing printer 
output that, at best, looked like 
it came from a typewriter (re- 
member typewriters?). 

But that year, two 
changed the world of fonts for- 
ever. First, Apple Computer 

Inc. introduced the Macintosh, 

then Hewlett-Packard Co. de- 

buted the original LaserJet 


used computers 


were used 


events 


printer. 

The 
the computing world to the 
concept of multiple fonts that 
actually looked like the type in 
and magazines. No 
longer were all characters, 
whether a capital W or lower- 
case i, forced to occupy spaces 
of equal width. 

The LaserJet came with two 
new-to-computers proportion- 
ally typestyles, and 
we've been printing our mem- 
os and reports with Times Ro- 
man, Helvetica and others ever 


Macintosh introduced 


books 


spac ed 


since 

Together, the Macintosh and 
the LaserJet opened up to com- 
puters the world of typography 


@ Are there technologies or issues you would like to learn about in QuickStudy? Please send your ideas to quickstudy@computerworld.com. 


and its hundreds of years of 


tradition. Although virtually 
all typesetting is now done by 
computer, it was a very spe- 
cialized art for centuries, and it 
developed a rich language to 
describe the various elements 
that entered into type. The fol- 
lowing are some of the most 
common terms: 


Glossary of Type Terms 

Typeface: This refers to the ba- 
sic design, which is often ex- 
tended to a family of faces 
(called styles in some systems) 
that are variants of the basic 
design, such as bold and italic. 
Font: Technically, the set of 
characters contained in 
member of a typeface family. 
In practice, however, the term 
indiscriminately to 
mean the face, a family or one 
member of a family. 

Bitmap fonts: These are de- 
signed to appear on-screen in 
one size only, and they’re opti- 
mized for viewing at that size. 
Bitmap fonts aren’t used much 
today, as the more versatile 


one 


is used 


outline fonts have taken over. 

Outline fonts: can be 
scaled to any size, remaining 
sharp and clear in very large 
sizes. The first outline fonts 
were developed by San Jose- 
based Adobe Systems Inc. for 
the PostScript system and were 
called Type 1 fonts. Later, Ap- 
ple developed the TrueType 
format, which was subsequent- 
ly adopted by Microsoft Corp. 


These 


¢ 


for use in Windows. And intro- 
duced with Windows 2000 was 
a new type of outline font 
called OpenType, which essen- 
tially replaces and subsumes 
both Type 1 and TrueType. 
Character set: A font can have 
any number of characters in it. 
Some specialized symbol fonts 
might contain only a few char 
acters, while others designed 
for multiple languages can have 
as many as 1,000 characters. 
Double-byte characters: Many 
Asian languages, based on pic- 
torial glyphs signifying words 
or concepts rather than letter 
alphabets, use tens of thou- 
sands of characters. 

This 
problems that ASCII was nev- 


creates obvious font 
er designed to handle. The 
most common way out of this 
dilemma _ involves 
two bytes per character in- 
stead of one. This allows the 
computer to 
some 65,000 different symbols. 
Glyph: This is the actual graph- 
ic representation of a single 
letter or symbol. Thus, the 
glyphs for the letter A in two 
fonts will 
though they 

same character. 
Kerning: Especially when used 
in large sizes, the horizontal 


allocating 


be different, even 
represent the 


keep track of 


spacing between individual 
letters must often be adjusted, 


or kerned. For example, look 


at the Ty in the headline of 


this QuickStudy. If normal 
spacing were used, these two 
letters would seem unnatural- 
ly far apart. By sliding the y 
underneath the top arm of the 
T, the visual spacing — how 
the eye perceives it — is made 
more even, and this lets the 
eye move smoothly 
along the line of text. 
Point size: Type and fonts are 
measured in archaic units 
called points, one point being 
very close to 1/72 of an inch. 
Text (normal reading) sizes 
tend to run in the range of 8 to 
12 points; the headline above 
measures 107 points in size. 
What those points measure, 
however, isn’t always obvious. 
It’s not the height of the capital 
letters; it’s the distance from 
the top of the highest part of, 
say, an f to the bottom of the 
lowest part of, say, a g. (see the 
diagram below). 
Type design: Explaining the de- 
sign and all the elements of a 


more 


typeface is beyond the scope of 


this page, but if you’re interest- 
ed in learning more, I suggest 
Robert Bringhurst’s The Ele- 


ments of Typographic Style 
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(Hartley & Marks, 1997). 

There are many classifica- 

tion schemes for letter design, 
but the major ones you need to 
know are serif (letters with 
little “feet” on them, like the 
ones you're reading now) and 
sans serif (more geometric and 
usually plainer, like the para- 
graph headings in this glos- 
sary). Many other classes exist 
for decorative or historical 
reasons. 
Unicode: Computers once dealt 
with just 128 characters for let- 
ters, numbers and symbols - 
the ASCII set. It took a lot of 
software contortions to use a 
language with multiple accents 
and diacritical marks (as in 
languages such as Polish or Ro- 
manian) or even a totally dif- 
ferent alphabet (such as the 
Russian language’s Cyrillic al- 
phabet). Character sets were 
expanded to 256 and beyond, 
but this didn’t solve the prob- 
lem very well. 

Unicode is a new standard 
for fonts, a kind of “super- 
ASCII” framework that allows 
65,000 characters in a single 
font, with mechanisms for eas- 
ily changing from one subset 
to another. It’s been around for 
a few years, but little has been 
done with it. D 





Font Anatomy 101 


Printed letters are measured in units called points. 
Other important features of letter design are shown here. 








ascender 


ascender line 
cap line 


descender line 
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Hello, This Is Your 
E-Mailbox Calling 


Conita Technologies’ voice portal 
software delivers e- -mail via telephone 


BY AMY HELEN JOHNSON 
HEN RAY 
Whitlock, 


an interna- | 
tional mar- | 
keting man- | 


ager at Pirelli Cables and Sys- 


tems Ltd., is traveling, he 


doesn’t need a laptop to check | 
his e-mail. He just pulls out his | 


cell phone. 

Pirelli has a personal virtual 
assistant (PVA) system 
stalled at its headquarters in 
Columbia, S.C 
remotely operate applications 


such as e-mail through voice | 
commands. Built by voice por- 
Technolo- | 
gies Inc., also in Columbia, the | 


tal vendor Conita 


PVA technology “ 
as responsive as possible,” 
Whitlock. 

Pirelli’s 75 sales and market- 
ing team members don’t have 
the time or laptop ports need- 
ed to log on to the corporate 
server remotely. But if they 
have their cell phones 


helps us be 
says 


taxi ride — they can receive 


and send e-mail, receive calen- | 


dar and scheduling alerts by 
phone, and speed-dial from 
their address books. 


Taking Advantage of Mobility 


Conita CEO Jeffrey McElroy 


says the company was formed | 
to serve mobile workers who | 
have been left behind by just- | 
in-time information technolo- | 


gies. Those applications work 
great when you're at a desk- 
top, he says, but the employ- 
ees who are most pivotal to 
profit — such as the mobile 


sales force — can’t take advan- | 


tage of them. 


“Those people today are just 


not at the same level of aware- 
ness and knowledge of things 
that are going on at the compa- 
ny as those who are sitting at 
the desktop,” says McElroy. 
Conita’s PVAServer sits be- 
hind the corporate firewall, in- 
tegrated into the corporate 


network infrastructure. A sep- | 


arate module links to a Micro- 


in- | 


, that lets users | 





and a | 
few minutes — say, during a | 


soft Exchange server for voice 
access to e-mail. 
Notes module is scheduled for 


release this quarter.) Another | 


module provides a Web-based 


user interface for setting up | 


| ogy. One thing that makes the | 
| engine successful, 
(A Lotus | 


The Conversant Dialog En- 
gine, which manages the voice 
conversation with the user, is 
the PVA system’s key technol- 


says McEI- 
roy, is that it can adjust the dia- 
logues and phrases it uses to 
match the situation 


| past behavior of the user. 


rules such as having messages | 
| a consulting firm in Mountain 


filtered based on the sender’s 
identity. 


| View, Calif., 


Tim Scannell, an 





PVASERVER. gives senile cules ane access to their e-mail, says 
Jeff McElroy (center), seen with Richard Ulmer and Thomas Militello. 


Conita Technologies Inc. 


Location: 1200 Main St., Suite 
900, Columbia, S.C. 29201 


Telephone: (888) 515-6200 





Web: www.conita.com 





The technology: Voice portal 
software 





Why it’s worth watching: 

Its server enables access to 
Microsoft Exchange e-mail, voice 
mail and custom applications, 
using a telephone and voice 
commands. 


Company officers: 

¢ Jeffrey McElroy, president, CEO 
and co-founder 

Richard Ulmer, vice president of 
engineering and co-founder 

¢ Thomas A. Militello, vice presi- 
dent of strategy and planning and 
co-founder 





Milestones: 

¢ 1998: Company founded 

* March 2000: First product intro- 
duced 





Employees: 55; 
96% growth per 


mpd 


Burn money: $9.5 

million from SAIC Venture 
Capital Corp., Coastal Growth 
Partners LP, General Magic Inc., 
the company’s founders, and 
angel and private investors 





Products/pricing: PVAServer, 
$3,995 per telecommunications 
port; PVAExchange, $4,995 per 
system: PVAStudio $995 per seat 


Customers: Pirelli Cables and 
Systems; International Computers 
Ltd.; Applicast Inc.; Enabling Tech- 
nologies Co.; Nelson, Mullins, Riley 
and Scarborough LLP 


Partner: Telcordia Technologies 
Inc. 

Red flags for IT: 

¢ The system's security may not be 
adegiiate for some applications. 

¢ It works only with Microsoft 
Exchange e-mail servers. 


and the | 


industry 
analyst at Mobile Insights Inc., | 
| Talk About Improvements 


says the ability to | 


| are 
| nology for their e-mail server 





PUTE 
oo", Ry 


customize is what sets Coni- 
ta’s products apart. The firm’s 
PVA system with a 
graphical development envi- 
ronment that lets companies 
build customized voice appli 
cations that can, for example, 
deliver sales updates over the 
| phone. 
Conita 


comes 


has links to North 


| Vancouver, British Columbia- 


based Pivotal Corp.'s eRela- 
package, McElroy 
says, and is working on inte- 
gration with back-office sys- 


tionship 


| tems from Siebel Systems Inc. 


in San Mateo, Calif., and Inter- 
act Commerce Corp. in Scotts- 
dale, Ariz. 


Scannell says Conita’s tech- 
nology has a few weaknesses, 
most notably in the area of se- 


| curity. And the company could 
easily be overshadowed by Mi- 


crosoft Corp. and IBM, which 
investigating voice tech- 


products, or by a database 
company like Oracle Corp. 
McElroy says Conita is work- 
ing on increasing the intelli- 
gence within the product. For 
example, he says, the preferred- 
sender filter that lets messages 
from designated people always 
ring through could be expand- 


ed into the concept of an inner | 


circle of contacts who receive 
instant messages. 
The company has greatly 
improved its PVA sys- 
(ee tem’s speech-recogni- 
© tion capabilities, says 


“Tging Whitlock, who has 
aN] 1es 


used the product since 

its first release. 

There’s no_ tedious 
training required — such as 

having to repeat phrases over 

and over to get the software 

used to your speech patterns 


| — and Whitlock says the sys- 
| tem has no trouble with his 
| Southern accent. 


Still, McElroy says he wor- 


| ries that the voice technology 


category as a whole will earn a 
bad reputation if any one ven 
dor has subpar technology that 


| frustrates users. 


“Our concern is that voice 


| portals that aren’t very good at 
| voice recognition will get a 
| reputation for not working,” 


says McElroy. “We’ve gone to 


| great pains to mitigate that, but 


not all the consumer portals do 


| the same.” D 





Johnson is a Computerworld 
contributing writer in Seattle. 


the buzz 


STATE OF 
THE MARKET 


Voicing 
Opposition 


Tim Scannell, an analyst at Mobile In 
sights, says Conita has entered a con- 
tentious marketplace. At its heart, he 
says, the fight is about who's going to 
own the customer: wireless carriers 
retailers or content providers 
Everyone's ultimate goal, says Scan 


| nell, is to aggregate content and make it 


available to telephone users. But, he 
warns, that’s going to take time. Tool 
sets are forthcoming to help solve the 
application problem, but no killer apps 
have arrived. And the wireless infra- 
structure is slow and spotty, he points 
out, so phone users have no guarantee 
of bandwidth or coverage 

Finally, says Scannell, security con- 
cerns have been left unresolved, with 
carriers expecting third-party vendors to 
come up witha fix. 

Conita faces several types of com- 
petition. One is service offered by 


| wireless carriers, such as the Wildfire 


agent from Wildfire Communications 
Inc. in Lexington, Mass. Its technology 
is limited to vocalizing the services of- 
fered by the phone carrier; unlike Coni- 
ta’s PVAServer, it doesn’t tap into the 
corporate infrastructure to access in- 
ternal e-mail 

Another class of competitors is wire- 
less portals such as Tellme from Moun 
tain View, Calif.-based Tellme Networks 
Inc., which lets phone users access in- 
formation such as soap opera updates 
or stock quotes 

Among the vendors that offer voice 
portals that integrate into a corporate in- 
frastructure, the following two firms 
come closest in competing with Conita 


Categoric Software 

Sterling, Va 

www.categoric.com 

Xalerts sends out mobile phone alerts 
based on programmed business rules, 
using information within corporate data- 
bases as triggers 


eDispatch.com Wireless 
Data Inc. 

Burnaby, British Columbia 
www.edispatch.com 

EDispatch has a more narrow market 
focus than Conita, concentrating on dis- 
patching mobile workers such as field 
service technicians and delivery drivers 
The company originally targeted corpo 
rate customers, but it now positions it- 
self as an infrastructure partner for mo- 


bile communications carriers 


- Amy Helen Johnson 
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Personalities 


Business technologists - masters of both 


technology and business strategy - are 
becoming increasingly common at and 


critical to organizations. To be successful, 


they have to develop two different kinds 
of skills. By Mary Brandel 


ED SMITH says the 

most important area 

for business technologists 
to hone is communication: 
“If you can communicate 
well and listen well, 

that's half the battle.” 


. HOMELIFE FURNITURE 
Corp., Ed Smith splits his 
time working 
with the company’s CIO 


between 


and working with the vice | 


president of business strategy. 


Half the time, he’s documenting busi- | 


ness rules for the $700 million Hoffman 
Estates, Ill.-based furniture company, 
which was spun off in 1999 from Sears, 
Roebuck and Co. He spends the other 
half of his time building computer sys- 
tems to execute those rules. 


| Smith, 
| have been around for years, they’ve be- 


ogy for solving problems, while the 


first thing the business [side] thinks of 


is process,” he says. 

Smith is one of many IT workers who 
walk this double line. Referred to as 
“business technologists,” they are pro- 
fessionals who either hail from the IT 
department and have honed their busi- 
ness skills or who started out in busi- 
ness and have developed solid technol- 
ogy skills. 

Some, like Jim Barron, vice president 
of business development for wireless 
Internet solutions at Polaroid Corp. in 
Cambridge, Mass., started off in a busi- 
ness department and became enam- 


ored of technology. Others, like Smith, | 


started off with their heads in CICS and 


strategy. 
While 
Barron 


business 
and 


technologists 
countless others 
come so highly valued by companies 
that anyone in the workforce would do 


well to learn from their experiences in 


developing a unique skill base. 


Smith says that for his part, he keeps | 
| his business hat on by focusing on three 


| goals per day: knowing the audience, 





executing something every day (to keep 


the business folks happy) and learning | 


continuously. The most important area 
to hone is communication, he 
“Since you’re in the trenches, it’s easy 
to identify the business rules,” Smith 


says. 
says. “But if you can communicate well 
and listen well, that’s half the battle.” 


Bridging the Gap 


Barron’s career has been redefined 


because of his passion for the Internet. | 


After 26 years in sales and marketing at 
Polaroid, he became a leading advocate 
for using the Internet to enhance the 


firm’s business model. About a year | 


ago, when Polaroid’s CEO agreed that 


the company should join the e-business | 
community, Barron was chosen to head | 


the effort. 


While Barron primarily considers | 


himself “a business guy,” he says he also 


has a mathematical background and “an | 
intuitive feel for technology.” Still, he | 


say, upon starting his new job he felt 
like he was back in school. “There was a 
massive amount of self-learning, and 


the Internet is beautiful for that,” he 
| says. He also attended seminars and 


| workshops in e-commerce and channel 


His focus is on enterprise application | 
integration and making sure transac- 
tions flow smoothly from the cash reg- | 
isters to the SAP system to the forecast- | 
ing system and out to payroll. 

Understanding both sides of the | 
fence — the business as well as the 
technology — is key for an enterprise | 


| architect like Smith. “I’m working clos- 


| er and closer with the business [side],” | 
| 


he says. In fact, he was recently promot- | 
ed to director of IT. 
“The first thing I think of is technol- | 


conflict and “did a lot of hanging out 


with my IT friends and rolling up my | 
sleeves and working in a very effective | 


cross-functional business team model.” 

Barron says he has needed to have a 
grasp of “some fairly beefy technology,” 
such as when he helped make some 


multimillion-dollar software decisions. | 


He has also developed a deep respect 
for IT standards. “Every marketing per- 
son has a view of what their Web site 


| should look like, but you can end up 


with different parts looking as though 


| businessperson and... 
Cobol but became entwined in business | 


like | 
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they were built by 15 different compa- 
nies,” he says. “I’ve always heard this 
from the tech guys, but being on the 
other side of the argument, I didn’t un- 
derstand it as well.” 

The technology arm of The Limited 
Inc. in Columbus, Ohio, believes so 
strongly that its 700 IT employees 
should be business-minded that it pro 
vides business training and mentoring 
relationships to get them up to speed. 

“You have to make IT part of the 
business strategy to begin with,” says 
John Ricker, CIO at Limited Technol- 
ogy (LTS). “What that 
quires is a different type of technologist 
— one that gets kudos for being a good 
a good technol- 


Services re- 


ogist as well.” 

Creating finding employees 
skilled in both business and technology 
is a tall order. At the LTS learning cen- 
ter, employees attend 
teaching everything from retail 
counting to Java. While the company is 
currently rolling out a skills assessment 
process that will help employees know 
what training they need, it’s up to the 
individual to make such a determination. 

But whether you engage in formal 
training or in-the-trenches learning, 
everyone agrees that the business and 
technology balance is tough to main- 


or 


can courses 


ac- 


| tain. “I know I have challenges on the 


business side,” Smith says. “It’s a hard 


fence to straddle.” D 


Brandel is a freelance writer in 
Newton, Mass. 


Limited Technology Services CIO John 
Ricker says the following are characteris- 
tics of the ideal technology associate: 
@ Business and financial acumen, such as 
understanding what an “internal rate of 
return” calculation is and how to get it, or 
how to read a profit-and-loss statement 
® Understanding the tension between 
budget, operations, capital, expense and 
head count 
@ Sensitivity to all the dimensions that 
influence a project, not just being able to 
recognize, “Oh, this is a Unix project.” 
® Both written and oral communication 
skills 
® An understanding of relationship 
management - up, down and across the 
organization 
® Project planning skills 
@ Performance monitoring skills 
® An understanding of the value of 
coaching 
® A customer-focused approach ~ under- 
standing what the customer wants and 
bringing value to the business 

- Mary Brande! 











‘na ela a Cole] om @r- l= aler-l aim ie) ome 


The Hottest 
Conference This Spring! 


STORAGE | 





Co-owned & 


¢ Storage Networking World®, an alliance between the SNIA and Produced by: 
NE WORKING Computerworld, promotes access to the latest information on storage 


WwoRLD solutions for users, implementers and vendors. 


¢ Aconference program featuring industry leaders, exciting panels, 
informative sessions, analyst updates, tutorials, and a multi-company 
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pre-IPO e-manufacturing company 


Camstar provides e-manufacturing 
solutions for Fortune 1000 corporations. 
We're manufacturing's answer to 
e-business for many of the world's 
leading businesses, like Agilent, IBM 
and JDS Uniphase, to name a few. 

Grow with us! 


We are seeking the following individuals 
to help in our growth: 














* Web Application Developers 

* QA Engineers and Manager 

* Software Engineers (Business Logic) 
(MFC/ActiveX, Windows/Web Client) 

















Camstar offers competitive salaries and 
full benefits, including a 401(k) plan 
Please submit resume and position of 
interest to: 











CamStar Systems, Inc 

Attn: Human Resources 

900 East Hamilton Avenue, Suite 400 
Campbell, CA 95008 

Fax: 408-558-9350 

E-Mail: hr@camstar.com 


EOE 
For Details Explore: www.camstar.com 
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What she does with it is something else. 


Something magical happens to problems when Lynne Cantor, from NCR's United 
Kingdom office, gets a hold of them: They appear to disappear. That's because 


Passionate About Making A Difference. 


she knows that the secret to successful problem solving isn't hocus pocus, 
munication. "| talk to people,” says Lynne. “I articulate the benefits 
of getting it right and highlight the negatives of doing it wrong. It could be 
as simple.as calling someone back, or as major as saving hundreds of dollars 
| don't give up because someone says no.” It's just this sort of passion for making 
a difference, for getting things right, that makes NCR different. We've always 
been about solutions. Innovations. Our people care because we care about 
our people. Or as Lynne Cantor might say, “Abracadabra! Problem solved." 
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CERT® Coordination Center, operated by the Software 
Engineering Institute at Carnegie Melion University 
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Protecting the future of technology and networks 


Join us: www.cert.org/jobs/ 


Opportunities in research, training, and analysis, among others 
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UCITA 


the proposed act — in 
baseline, quantifiable terms — 
on one’s business,” said Barnes. 

But Nationwide’s estimates 
were met with questions by 
UCITA proponents, who said 
they would like to see the com- 
pany’s study. 

“I’m doubtful about that esti 
mate being attributable to any- 
thing in UCITA,” said Carlyle 
Ring, who headed the UCITA 
drafting committee at the Na- 
tional Conference of Commis- 
sioners on Uniform State Laws 
(NCCUSL), which drafts laws 
for state adoption. 

UCITA may face a decisive 
showdown in 2001, as the Digi- 
tal Commerce Coalition (DCC), 
which represents 
seeks to create momentum for 
its adoption by winning ap- 
proval in a handful of states. 
The DCC hasn't 
states it’s targeting, but they 
could include Texas, Oregon 
and Washington, according to 
some familiar with the issue. 
UCITA has been adopted in 
Maryland and Virginia. 

The year 2001 “is pretty crit- 
ical — if we can keep the DCC 
from getting any new states to 
accept this or pass it, I think 
that would be a critical blow to 
them,” said Randy Roth, direc- 
tor of corporate purchasing at 
The Principal Financial Group 
in Des Moines, Iowa. 

Dan Duncan, executive di- 
rector of the Alexandria, Va.- 
based DCC, said he disagreed. 
“If we don’t get UCITA passed 
in four to five states this year, it 
doesn’t put a death knell on 
UCITA,” he said. But the group 
would need to educate legisla- 
tors “so that they can be pre- 
pared in the following years to 
pass UCITA,” he added. 

UCITA, which was sent by 
the NCCUSL in 1999 to the leg- 
islatures of all U.S. states and 
territories for their considera- 
tion, seeks to bring a set of 
consistent rules to 
contracts and licensing agree- 
ments and give user compa 
nies the freedom te change 
terms and conditions in con- 
tracts. But opponents argue 
that the act would create a se- 


raw, 


vendors, 


said which 


software 





One Estimate 


Nationwide estimates UCITA 
will boost its IT and contract- 
ing costs by at least $20M: 


SECURITY, 45% OF THE COST: 


Increased spending is need- 
ed to offset risk associated 
with self-help and other re- 
straints. 


QUALITY ASSURANCE, 35%: 


Liability-limiting provisions 


- are disincentives to vendors 


to deliver good products. 


CONTRACTING, 20%: ucrras 


provisions will make negoti- 
ations tougher. 


ries of adverse default rules, 
such as self-help, that will be 
difficult to negotiate away 

The details of UCITA are 
complex, and opponents said 
it’s not an easy task to raise 
awareness among 
companies. The act “could be 
adopted because people just 
don’t get it,” said Bill Zumwalt, 
CIO at McLane Co., a wholesale 
distributor in Temple, Texas. 

Opponents were unsuccess- 
ful in getting UCITA reshaped 
in Virginia. A study commis- 
sion, formed after the 
adopted the act, rejected many 
proposed amendments but did 
approve one significant provi- 
sion that overturned a require- 
ment for all software contract 
renegotiations in the event of 
an acquisition or merger. 

In Oregon, UCITA has re- 
ceived conditional endorse- 
ment from a study commission 
that acknowledged that a uni- 
form law is needed to deal with 
new kinds of transactions, said 
Peter Bragdon, an assistant 
general counsel at Columbia 
Sportswear Co. in Portland and 
the head of a state subcommit- 
tee that looked at UCITA. But 
Bragdon said the act needs 
more study. Enough “question 
marks” have been raised, he 
said, that “there ought to be 
concerns in the Legislature.” 

Still, Bragdon said adoption 
in 2001 of UCITA by the Ore- 
gon Legislature is possible. The 
state’s part-time legislature “is 
heavily reliant on information 
from lobbyists and other out- 
side experts,” he said. D 
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Wireless Net Saves Time, Dollars for P.R. 


Fixed wireless 
conquers terrain 


BY JAMES COPE 

By the end of 2001, the govern- 
ment of Puerto Rico plans to 
complete a fixed wireless in- 
frastructure that will link dis- 
parate government and public 
entities throughout the island 
territory. Of the 78 fixed wire- 
less sites planned, 45 were up 
and running last month. 

Jorge Aponte, director of the 
Puerto Rico’s office of manage- 
ment and budget, said his ini- 
tial idea was to purchase net- 
work services from a telecom- 


Continued from page 1 


Supply Chain 


the amount of paper transac- 
tions needed, helping it opti- 
mize its supply-chain opera- 
tions and improve its manufac- 
turing processes. 

But while the financial bene- 
fits of supply-chain manage- 
ment (SCM) improvement 
projects can be hard to quantify, 
firms are quick to feel the 
downside if anything 
wrong, a recent survey 
cates. While 
consider companies like Dell 
Computer Corp. and Cisco Sys- 
tems Inc. in San Jose examples 
of high-tech supply-chain suc- 
cesses, other firms should be 
warned against trying to imitate 
them, experts said. 

It’s difficult to document 
SCM return on investment of 
any sort, said Vinod Singhal, as- 
sociate professor of operations 
management at the Georgia In- 
stitute of Technology in Atlanta, 
who recently completed a study 
of 861 companies, including 
some that suffered highly publi- 
cized supply-chain glitches be- 
tween 1989 and 1998. “Much of 
the evidence [for payoff] is 
anecdotal,” Singhal said. 

Only a few lucky companies 
can prove that they have 
achieved any real payoffs from 
their SCM efforts, said Robert 


goes 
indi- 


many observers 





munications carrier. But that 
was going to cost $90 million 
to $100 million in annual fees 
In the end, the island elected 
to build a hybrid network using 
fixed wireless equipment from 
Western Multiplex Corp. in 
Sunnyvale, Calif., and an exist- 
ing fiber-optic backbone. The 
capital expenditure will be 
about $50 million, Aponte said, 
and the annual operation cost 
won't exceed $15 million. 
Aponte fixed 
wireless between network ac- 
cess points and the backbone 
effectively bypassed the prob- 
lems of trenching and pulling 
fiber throughout the rough is- 
land terrain. And because the 


said using 


Austin, an assistant professor 
at Harvard Business School. 
With so much money and time 
at stake, implementa- 
tions create a return-on-invest- 
ment crisis, he added. “Rarely 
have general managers been 
asked to make such important 
high-stakes choices with so lit- 
tle analytical backup,” he said. 

But one thing is certain: Sup- 
ply-chain projects are costly 
time-consuming efforts — and 
if they go wrong, they can 
place a company’s operations 
and financial viability in peril. 
In Singhal’s study, supply- 
chain gaffes resulted in an av- 
erage stock price plunge of 
8.62% — or $120 million in cap- 
italization per company. 

In the past year, PetSmart.- 
com Inc. in Pasadena, Calif., Jo- 
Ann Stores Inc. in Hudson, 


these 





Supply-Chained 

An study of 861 firms over ll 
years indicates any supply- 
chain glitch can hammer a 


company’s stock value. 


= On average, the stock tum- 
bles 9% after a problem is 
announced. 


# Over six months, the 
stock can fall 20%. 


= On average, the market cap 
drops $120M per company. 


system runs over license-free 
frequencies, no approval pro 
cess slowed deployment. 

Installation of the fixed wire- 
less sites began in April, and 
the project linking up to 3,000 
facilities should be done by the 
end of 2001, said Aponte 

Brownlee Thomas, an ana- 
lyst at Giga Information Group 
Inc., said it made sense for 
Puerto Rico to create its own 
network, given the service fees 
it would have had to pay a ser 
vice provider. She compared 
the project to what some uni- 
versities have been doing, con- 
necting campuses and build- 
ings using combinations of un- 
used fiber and wireless. D 


Ohio, and Hershey Foods Corp. 
in Hershey, Pa., all faced seri- 
inventory and 
chain problems that slashed 
revenues. In the 
problems occurred while in- 
stalling SAP AG ERP software 

“All major IT projects are 
risky, because they 
both technological and organi- 
zational change,” said Ronald 
Castro, director of SCM at 
Philippines-based Dole Asia. 
But these risks can be managed 
“by having a 
where you want to go with the 
project, tight project manage- 
ment and a commit- 
ment to making it work,” said 
Castro. 

Dole Asia has been installing 
software from i2 Technologies 
Inc. in Dallas in an effort to 


ous supply- 


each case, 


involve 


clear idea of 


strong 


create a single, coherent sup 
ply-chain system that will con- 
nect its manufacturing, logis- 
tics and sales and marketing 
units for pineapple harvesting 
and processing. 

In 1997, The Boeing Co. took 
a $1.6 billion charge because of 
supply-chain bottlenecks fol- 
lowing a surge in demand for 
its aircraft. Now, after revamp- 
ing its supply-chain operations 
over the past two years, Boeing 
has been able to reduce parts 
shortages from as 
1,400 per day to nearly zero 
and has been working to better 
align itself with its suppliers, 
said a spokesperson. D 
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The Lowdown for O01 


EADY FOR 2001? The new year’s 


s IT odyssey will be dri- 


ven by a slowing economy — and that means a bumpy 
ride, not just for cash-starved dot-coms and revenue- 
short vendors, but for belt-tightening corporate IT 
shops, too. The result: Fewer choices and uglier options, 
just as a new slew of problems charges to the front of the IT agenda. 
The good news: Vendors will be sweating bullets for the next few 
quarters. With PC sales down, corporate IT is in a position to bar- 
gain hard. Vendors need that revenue — and they need to move 
units to reduce inventories. Cut deals and buy now — if you can. 
Why? Because the bad news is that IT budgets will hit a wall too as the 


economy cools. Keep an eye on your own cor- 
porate earnings, and an ear out for executive 
scuttlebutt — and be prepared to suspend proj- 


ects you can live without. If the Federal Reserve 


really can engineer a soft landing, you'll be 
ramping those projects back up before next 
New Year’s. 

Will dot-com layoffs help with the IT skills 
shortage? Maybe — but don’t 
count on it. Many dot-com 
refugees will jump back to start- 
ups the first chance they get, 
which makes them expensive 
short-timers. And if your IT shop 
is caught in a budget downdraft, 
you won't have big bonuses or 
exciting projects to encourage 
them to stay. 

Meanwhile, with hours up 30% 
in some IT shops and the loom- 
ing threat of budget cuts, get set 
to handle unhappy veterans if you 
promise the world to dot-com 
refugees. Your best current peo- 
ple may not leave while things 
are tight — but if you snub them 
now, they’ll remember it when 
times get better. 

When you're finished sweating 
over budgets and personnel, ex- 
pect to spend more time with your 
legal department. Customer privacy 
is a hot issue now, but right be- 
hind it are consumer protection, 
unfair competition and even 
liability issues if your employees 
spread viruses or a hacker diverts traffic from 
your site. 

Remember, if a data-related lawsuit hits your 
company — or even a competitor — your legal 
people will want to know everything about 
the data you collect, how it’s used and how it’s 
protected from both crackers and improper use 
by your own people. 

Crypto for everything that moves on your net- 


You already 

know the big 

challenges in 
technology 
for 2001. 


works won’t be a mandate for 2001, but it’s just 
around the corner. You can sell encryption to 
management as a way of protecting customers 
and guarding against industrial espionage. But 
make sure the crypto system you choose is 
modular and easy to upgrade. As U.S. export 
laws ease and industrywide standards arrive, 
you may need to convert to a new system — 
and fast. 

You already know the big chal- 
lenges in technology for 2001: 
wireless handhelds, remote user se- 
curity and B2B integration. And the 
big challenge in handling your 
CEO is still managing expectations. 
Hot airline in-flight magazine 
topics will include bulletproof ap- 
plications, “evolutionary” software 
written by computers and the won- 
ders of XML. If your CEO believes 
everything he reads, you'll have 
some explaining to do. 

But if you adjust no other CEO 
ideas, be sure you manage expec- 
tations about customer service. 
Remember: 

a It’s not primarily a technology 
issue — it’s about your compa- 
ny’s people working with their 
customers. 

wilt can’t be fully automated. 

w All IT can do is provide better 
channels for communicating. 

Repeat those three truths to 
the boss over and over, early and 
often. That way, you won't be 
forced to burn your shrinking budget on whole- 
sale “customer service automation” projects 
you know are doomed, and you can focus on 
projects that will help your business plow 
through until the economy picks up again. D 


Hayes, Computerworld’s senior news columnist, 
has covered IT for more than 20 years. Contact him 
at frank_hayes@computerworld.com. 
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| DOT-CON New IT contractor 


pilot fish shows up for work at 

a dot-com. Her first assignment 
Call around and see how much it 
would cost to lease some office 
furniture. “What's wrong with 
what's here?” fish asks. “This 
furniture was put up as loan 
collateral,” explains the boss 
“It's history tomorrow. But don't 


| worry,” boss adds, “we'll make 


good on your paycheck.” 


TOKEN OF OUR DEPRECIA 


| TION Back in the days when a 


double-digit Pentium was state 
of the art, this pilot fish is hand- 


| eda 386 with 8MB of RAM and 

| told to go write code. System 

| barely limps along under Win- 

| dows 3.1 and frequently crashes 
| if fish tries to compile. When fish 
| asks for a better PC, boss can’t 

| believe he’s complaining: “You 
have the most expensive system 
| inthe entire company!” he sput- 


ters. “| paid $16,000 for that 
computer!” 


COMPANY'S WEB SERVER is 


co-located at a Web services 


| company, and reboots one day 


“seemingly for no reason,” says 
pilot fish at the client company 
Investigation turns up why: The 


| cleaning lady pulled the plug to 


plug in her vacuum cleaner. OK, 
it happens. But two weeks later, 


it happens again. “Obvious wor- 
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ry: It happened twice?” grumbles 
the fish. “Inobvious worry 
There's carpeting in the server 
room? Don't those usually at- 
tract static?” 


HELPFUL USER Network 
admin pilot fish gets e-mail 
from thoughtful user: “My Temp 
Internet folder is 78,409,728 
bytes used. Would it help if | 
deleted some of this?” 


AT LEAST HE ASKED Net- 
work admin pilot fish is trying to 
enforce the company policy that 
only the software that users 
need to do their jobs can go on 
company laptops. So he sets it 
down in writing and distributes it 
“No unauthorized software is to 
be installed on the laptops. An 
audit will be performed regularly 
to ensure that no unauthorized 
software gets installed.” The 
very next day, user asks fish's 
advice: “| was wondering - since 
| bring my laptop on the train and 
have a long ride home, do you 
have or know of any games | can 
install to play?” 


Make Sharky’'s new year happy: 
sharky@computerworld. 
com. You get a sharp Shark 
T-shirt if your true tale of IT sees 
print — or if it shows up in the 
daily feed on the Web at 
computerworld.com/sharky. 
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“L think you're a jealous that I 

found a community of people on 

MEN.com that worship the yam as 
I do, and you haven't." 
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“If you want to get venture capital, you‘d better 
read this book. Companies will either brand or die. 
It’s up to you.” 


—Guy Kawasaki, CEO, Garage.com, Palo Alto, CA 


“This book is a roadmap for exploiting the unique 
brand-building opportunities of the Net.” 


—AI Ries, Ries & Ries Focusing Consultants, Roswell, GA : 
Firebrands! 


Building Brand Loyalty 
“Michael has captured the essence of branding in in the Internet Age 


the Internet age. His research is impeccable. ie co 


This is a must read for anyone in marketing.” cio: Na nal 


—Andy Brownell, Director of Marketing, Compaq Computer Corporation 
Learn how to extend your brand 


Cec cccccccccccccccceseseseccceseceecees ecccccces > strategy by merging legacy marketing 
with Internet-specific techniques 


Available at online retailers and bookstores everywhere. 
For more information on these and other Osborne/McGraw-Hill titles, 


visit our website at www.osborne.com. 
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Balt IS no way ice) treat an falesieatsit customer. A lot of people are spending a lot of time online 
these days. That can put a strain on your systems. And your customers’ nerves. Call Sprint. We promise 99% busy-free dial-up and 
99.99% backbone availability for your customers. Then back our promise with some of the most aggressive Service Level Agreements 


3 industry. Furthermore, Sprint connects your customers to an all-digital Internet backbone. The only one with self-healing 





nology. The Sprint network is so fast and reliable, we guarantee that roundtrip backbone delays Sign up for a term 
agreement of one year 
or more and we'll waive 
xd 70 milliseconds. This is exactly the kind of service and speed that Internet customers the installation fee. 











t and expect. So call 1 877 294-7669 and speak with one of our data specialists. They can help you configure a robust, scalable 


Internet access solution right on the phone. Call today. Your customers are waiting 


Let’s make contact: 1 877 294-7669, www.sprint.com/ipnow 


> Sprint 


The point of contact 


nt tariffs and restrictions apply. Call for details 











